Is banjixiaoguanjia@1.0.0 safe to install?

banjixiaoguanjia@1.0.0

CAUTION· static only

Publisher claims: "自动化班级小管家作业截图工具。支持连接 Chrome 调试端口、进入指定课程、滚动查看学生列表、截取学生作业图片。专为小学数学老师设计，用于批量获取学生作业截图进行批改。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher wosuiyu · publishing for 230 daysInstalls 847Last detonated 16 min ago

What would fix this Watch Dispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 63/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Hidden zero-width characters detected. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM

File type combined with upload actionarchived-scripts/capture-complete.js:236 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-auto-v2.js:154 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-and-analyze-36.js:236 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-36.js:85 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-auto-start.js:426 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`📁 输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

HIGH

Hidden zero-width characters detectedSKILL.md:17 · Hidden zero-width characters detected — may conceal content- 👨‍🎓 滚动查看所有学生Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-auto.js:424 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 📁 结果保存: ${outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-auto-v2.js:175 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-36.js:65 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-v3.js:145 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/download-student-fixed-20260322.js:218 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 输出目录: ${outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-v3.js:166 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture.js:82 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${options.output}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/test-capture-fixed.js:200 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/test-capture.js:209 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actiondownload-homework.js:607 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 输出目录: ${path.join(this.outputDir, courseName)}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/grade-homework.js:26 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actioncapture-36-fixed.js:260 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` ✅ 截图完成，保存到: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-new.js:183 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/grade-homework.js:64 · File type combined with upload action — agent may exfiltrate local data filesconsole.log('截图保存位置:', result.outputDir);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/download-37.js:362 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 输出目录: ${path.join(OUTPUT_DIR, COURSE_NAME)}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/test-skill.js:21 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-complete.js:259 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-v2.js:288 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actioncapture-new-browser.js:464 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`📁 输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-final.js:158 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-final.js:137 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/complete-workflow.js:760 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 输出目录: ${this.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture.js:98 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/index.js:340 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n输出目录: ${this.outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-fix.js:49 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`输出目录: ${outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/index.js:551 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`目录: ${result.outputDir}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/grade-homework.js:43 · File type combined with upload action — agent may exfiltrate local data filesconsole.log('\n截图文件已保存到:', result.outputDir);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actionarchived-scripts/capture-new.js:160 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`\n输出目录: ${outputDir}\n`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

Cost to the agent

Instructions loaded

≈5,423 tok

1 file · 68 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

17 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%

Unclaimed publisher≈ +8 on the totalClaim wosuiyu: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.

Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim wosuiyu Propose a patch to the maintainer