agent-pool@1.0.0
CAUTION· static onlyPublisher claims: "全局Agent池。收录所有业务Agent的能力描述、工具依赖、记忆路径、工作区、触发条件。业务系统按需调用Agent，不绑定、不预分配。触发：查询Agent清单、编排新流程、新增Agent接入。" Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-14 and scored it 70/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Instructs the agent to modify its persistent memory or instruction files; Instructs the agent to modify its persistent memory or instruction files; Instructs the agent to modify its persistent memory or instruction files. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
| 虾调度 | 分发策略/渠道组合/节奏控制/内容筛选 | read / write | `agents/distribution-commander/MEMORY.md` | `agents/distribution-commander/` | CMO调度 / 内容审核通过后触发 |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.| 虾审核 | 内容质量审核/7维度评分/否决机制 | read / write | `agents/review-agent/MEMORY.md` | `agents/review-agent/` | 虾写作完成后触发 |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.| 虾优化 | 效果分析/四象限分类/策略反馈 | read / write | `agents/growth-analyst/MEMORY.md` | `agents/growth-analyst/` | 内容发布后数据触发 |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.| 虾写作 | 文案/邮件/落地页/技术文章 | read / write / edit | `agents/writing-agent/MEMORY.md` | `agents/writing-agent/` | CMO调度 / 内容链路调用 |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.| 虾规划 | 内容策略/关键词矩阵/SEO规划 | read / write | `agents/content-strategist/MEMORY.md` | `agents/content-strategist/` | CMO调度 |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
10 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim renxm78-creator: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.