preflight

https://github.com/oidsdev/honeypot/tree/main/skills/oids-python-sdk

oids-python-sdk

Caution

Score 86 / 100 · 3 files read · 0 critical, 0 high, 2 medium, 0 low findings

Report f6b5c9fa81e1ba1c · first scanned 2026-10-28 · scanned 3× · keyed to the exact package contents, so this link always shows this version

Listed in the Honeypot skill index

Subscores

credentials100
exfiltration92
execution92
injection100
obfuscation100
files100

100 is clean. Deductions come only from the cited findings below.

Findings

mediumCode contacts api.tryoids.com, which the documentation never mentions
(package) · line 1 · rule M3
api.tryoids.com
mediumCan run shell commands from code
oids_client.py · line 3 · rule M1
Transport: curl via subprocess.""" import json import subprocess import urllib.parse import urllib.request import urllib.error

Permission surface

Network endpoints
api.tryoids.comgithub.comhoneypot-e6c.pages.devopensource.orgraw.githubusercontent.comschema.orgtryoids.comwww.w3.org
Environment read
no named variables
Shell execution
yes — code or scripts can run shell commands
Install hooks
none
Credential material
none referenced

Provenance

Source
GitHub
Repository
oidsdev/honeypot
Owner
oidsdev
Stars
0
Forks
1
Repo created
2026-09-29
Last push
2026-10-21
License
MIT

Badge for the author

Preflight grade

[![Preflight: Caution](https://preflight.orbitaldeskllc.com/badge/f6b5c9fa81e1ba1c.svg)](https://preflight.orbitaldeskllc.com/b/f6b5c9fa81e1ba1c)

The badge links back to this report and updates if the package is re-scanned at a new version.

Watch this package

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.

Share this report: https://preflight.orbitaldeskllc.com/r/f6b5c9fa81e1ba1c