Is aikey@0.3.14 safe to install?

aikey@0.3.14

VERIFIED· install only

Publisher claims: "AI KEY ——两套技能的总入口：做内容（选题/写稿/审核/复盘）+ 看生意（组合体检/营收归因/客户集中度/依赖风险/拿不准的决策）。三种模式：新手上路演示、任务前路由（按你的需求和丢进来的材料自动挑技能，把握大就直接开跑）、任务后导航。不知道用哪个就回这里。触发方式：/aikey、/新手上路、/aikey 教程、「做条视频」「出个口播」「今天拍什么」「内容下一步怎么走」；新手教程：/aikey 新手指南、/aikey 新手、「这个怎么用」「第一次用，带我走一遍」「不知道能干嘛」 Single entry point for both skill sets — content (topic, script, review, retro) and business (portfolio, revenue, concentration, dependency, decisions). Three modes: guided onboarding demo, pre-task routing, post-task navigation. Trigger: /aikey, "make a short video", "what should I shoot today", "how do I use this" —— AI KEY · 不给公式，给判据。每条规则都标了实测代价。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher iamzifei · publishing for 91 daysInstalls 613Last detonated 7d ago

$clawhub install aikey

Watch Report an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.

Tested: every file read, file written and host contacted by what ran
Not tested: use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 92/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.0sprocessno install scripts to re-run

Static findings

MEDIUM

npx invocation of non-well-known packagescripts/new-version.sh:80 · npx invocation of non-well-known package — may execute untrusted code

echo "AI KEY 有新版：${newer}${more}。更新方法：Claude Code / Codex 跑 \`npx skills add iamzifei/aikey -g --all\`；豆包 / WorkBuddy 把原来的下载地址再发一次。"

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

No other findings across 2,292 lines in 15 files.

Cost to the agent

Instructions loaded

≈5,478 tok

1 file · 15 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.