ai-gen-guard@1.0.2
VERIFIED· install onlyPublisher claims: "生成式 AI 服务合规护栏 v1.0.2。 基于《生成式人工智能服务管理暂行办法》（国家网信办等七部门令第15号，2023年8月15日施行） 及强制性国家标准《网络安全技术 生成式人工智能服务安全基本要求》（2025年11月实施）， 实时评估生成式 AI 服务的合规风险，覆盖备案登记、训练数据、内容安全、用户权益、标识义务五大维度， 输出风险等级与合规缺陷清单。 核心能力： - 🛡️ 生成式 AI 服务场景自动识别（大模型/智能对话/AIGC 等关键词触发） - ✅ 5 维度合规检查：备案登记、训练数据、内容安全、用户权益、标识义务 - 📐 办法 + 配套强制国标双重映射 - 🔴 风险" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 764 lines in 8 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.