bazi-full-fortune@1.1.5
VERIFIEDPublisher claims: "八字全方位算命 Skill — 排盘引擎 + 六亲十神规则 + 家庭校准 + 回测校验 + 八大维度 全方位分析模板。当用户提到八字、四柱、四柱八字、天干地支、日主、十神、大运流年、 喜用神、忌神、格局、身强身弱、五行旺衰、伤官配印、食神生财、排盘、反推阳历、 查黄历、命局分析等相关内容，或想了解命运、性格、事业、婚姻、财运、健康、学业 且明确要求或暗示使用八字体系时，触发此技能。支持可选的紫微斗数交叉验证以提升 结论稳定性。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Hidden zero-width characters detectedSKILL.md:344 · Hidden zero-width characters detected — may conceal contentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07No other findings across 4,901 lines in 23 files.