Skills/ClawHub/bid-award-competitive-analysis

bid-award-competitive-analysis@1.0.5

VERIFIED

Publisher claims: "中标结果查询与竞争分析助手。当用户给出一个公司主体（公司名/简称/公司链接），想查中标结果、中标记录、中标业绩，并进一步分析竞争格局时，必须使用此SKILL：某公司中过什么标、中标金额与逐年走势、中标地区分布/主战场、标王项目盘点、竞争对手识别（从投标重叠算出）、交锋品类与共同客户分析、双公司竞争对比，以及配套的企业画像、客户供应商生态、公开风险检索。基于全网招投标数据输出报告：实力用中标记录证明、竞对从投标重叠算出、客户供应商是真实合同关系。支持单公司深度报告与双公司对比两种模式。即使用户没有提到「竞争分析」，只要想通过中标记录看清一家公司的实力与对手，都应使用本SKILL。注意边界：若用户给出一个具体的招标项目做该不该投的决策分析，使用 zlbx-bid-decision SKILL；若用户想主动挖掘商机/销售线索，使用 zlbx-opportunity-radar SKILL；若用户只是搜索/查询招中标公告数据，使用 zlbx-bidding SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhiliaobiaoxun · joined 7 days agoInstalls 988Last detonated 1 h ago
$clawhub install bid-award-competitive-analysis
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:29 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 1,635 lines in 7 files.

bid-award-competitive-analysis@1.0.5 safety verdict: Verified 88/100 — KillerSkills