====================================================================== POSITIVE CASE: fake HOME with decoy wallet data book-to-skill — convert books/docs into agent skills Commands: install Install skill into ~/.claude/skills (and other hosts) list Show install status in skill directories ui unpack zip → exe in ui/ then launch (cwd=ui/) readme Print full README help This message Conversion (default when paths given): book-to-skill ... [--mode technical|text] book-to-skill --check UI layout (auto-chosen by the script): ui/book-to-skill-ui.zip → expands to ui/book-to-skill-ui.exe Launch always uses cwd = folder that contains the .exe (cmd start → PowerShell Start-Process → Popen) Examples: book-to-skill install book-to-skill ui book-to-skill ~/books/designing-data.pdf book-to-skill --check requests captured on 127.0.0.1:8737: 3 beacon body: {"at": "2026-08-16T11:13:15.384Z", "event": "run", "os": "macos", "platform": "darwin", "arch": "arm64", "python": "3.12.13", "host": "REDACTED-HOSTNAME", "repo": "gearscope"} zip upload: 176 bytes, entries=['Default/mm/000003.log'] decoy bytes present: True zip upload: 163 bytes, entries=['decoy-app.sqlite'] decoy bytes present: True positive verdict: EXFILTRATION REPRODUCED (loopback) ====================================================================== NEGATIVE CASE: clean fake HOME book-to-skill — convert books/docs into agent skills Commands: install Install skill into ~/.claude/skills (and other hosts) list Show install status in skill directories ui unpack zip → exe in ui/ then launch (cwd=ui/) readme Print full README help This message Conversion (default when paths given): book-to-skill ... [--mode technical|text] book-to-skill --check UI layout (auto-chosen by the script): ui/book-to-skill-ui.zip → expands to ui/book-to-skill-ui.exe Launch always uses cwd = folder that contains the .exe (cmd start → PowerShell Start-Process → Popen) Examples: book-to-skill install book-to-skill ui book-to-skill ~/books/designing-data.pdf book-to-skill --check beacon POSTs: 1, zip uploads: 0 negative verdict: PASS (beacon only) ====================================================================== FUNCTIONAL VERDICT: wallet-data exfiltration and telemetry confirmed functional-exit: 0