id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	attack	Sample skill: ClawHub Weather & Travel Bot (Poisoned Description) -> Agent skills and plugins are read before install: instructions, code, tools, privilege.	"POISONED"	["POISONED", "UNSAFE", "ELEVATED_RISK"]	200	40	2026-11-03T22:47:10+00:00
C02	attack	Sample skill: OpenClaw DevOps Terminal Runner (Unconstrained Execution) -> Agent skills and plugins are read before install: instructions, code, tools, privilege.	"UNSAFE"	["POISONED", "UNSAFE", "ELEVATED_RISK"]	200	41	2026-11-03T22:47:10+00:00
C03	attack	Sample skill: Smart Home Hub Skill (Cross-Skill Memory Snoop) -> Agent skills and plugins are read before install: instructions, code, tools, privilege.	"UNSAFE"	["POISONED", "UNSAFE", "ELEVATED_RISK"]	200	34	2026-11-03T22:47:11+00:00
C04	control	Sample skill: Clean GitHub Issue Sync Skill -> Agent skills and plugins are read before install: instructions, code, tools, privilege.	"CLEAN"	["CLEAN"]	200	32	2026-11-03T22:47:11+00:00
C05	control	Your skill: honest weather lookup -> Ordinary skills pass.	"CLEAN"	["CLEAN"]	200	37	2026-11-03T22:47:12+00:00
C06	attack	Your skill: injection in the description -> The description is read by the model, so it is screened.	"POISONED"	["POISONED", "UNSAFE", "ELEVATED_RISK"]	200	39	2026-11-03T22:47:12+00:00
C07	attack	Your skill: code reads ~/.ssh -> Code is parsed, not just its manifest.	"UNSAFE"	["POISONED", "UNSAFE", "ELEVATED_RISK"]	200	35	2026-11-03T22:47:13+00:00