1688-product-1688-product-manage@0.1.0
VERIFIEDPublisher claims: "将商品图片、文字、文档或参考商品链接整理成逐商品素材包，识别类目、整理 SKU，分别生成标题、类目属性和 SKU 后保存 1688 新商品草稿并交付编辑链接。用于新商品发品、素材补充与草稿任务续跑；仅收到素材而未表达发品意图时先询问用途。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
Python subprocess execution detectedscripts/_local_io.py:17 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05No other findings across 1,741 lines in 26 files.