Skills/ClawHub/bid-risk-redline-checker

bid-risk-redline-checker@1.0.9

VERIFIED

Publisher claims: "废标风险与控标信号识别助手。当用户给出一个具体的招标项目并希望排查风险时，必须使用此SKILL：废标风险评估、限制性信号识别（邀请招标/单一来源/定向资质条款/超短投标窗口/线下取文件）、竞争开放度分析、采购方历史供应商格局与在位者识别、同类项目对比、投标决策建议。基于全网招中标历史数据输出风险评估报告。即使用户没有提到「废标」，只要涉及标书有没有坑、是不是内定倾向、值不值得投等需求，都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher dragonzu · joined 6 days agoInstalls 1,193Last detonated 59 min ago
$clawhub install bid-risk-redline-checker
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 1,229 lines in 7 files.