Skills/ClawHub/ai-literacy-expert-v6

ai-literacy-expert-v6@6.0.0

VERIFIED· install only

Publisher claims: "「AI 通识课资深专家 V6.0 工作流引擎版」——在 V5.5 质量加固版之上，把 A→G 七大模块 + E·N 院校子模块 + 六大能力 + WorkBuddy 适配层，统一编排为可恢复、可验证、跨时间的自动化智能化工作流引擎（8 阶段管线 INTENT→PLAN→BUILD→VERIFY→ASSEMBLE→DELIVER→REPORT→LEARN）。⭐ 自动化：意图自动分类路由、互动控件由 Playwright 自动实测闭环（生成→实测→修复→复测，预算 3 次，见 assets/playwright-control-test-harness.js）、WorkBuddy 原生分发（IMA" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher linix-2026 · publishing for 75 daysInstalls 367Last detonated 3 h ago
$clawhub install ai-literacy-expert-v6
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

LOW
Prompt injectionreferences/module-f-safety-ethics.md:39 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- 示例：DAN（Do Anything Now）Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/p5js-game-design-guide.md:105 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **典型关卡**：F1-1 对抗样本战（拖扰动滑块让分类翻转）；F1-2 Prompt 注入突围（阻止 DAN 覆盖原始指令）Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionreferences/p5js-courseware-guide.md:200 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **方案**：对抗攻击演示器——在 Canvas 上展示一张被识别为"熊猫"的图像，拖动"扰动强度"滑块实时叠加噪声，观察分类器输出如何从"熊猫"翻转为"长臂猿"；并列展示 Prompt 注入弹窗（DAN 类）Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈3,640 tok
1 file · 44 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.