Skills/ClawHub/bidding-due-diligence

bidding-due-diligence@1.0.6

VERIFIED

Publisher claims: "招投标尽职调查助手（投资/合作/并购前的轻尽调）。当用户给出一个公司主体，想在投资、并购、合作、签约前做尽职调查、核实经营实态时，必须使用此SKILL：企业尽调、轻尽调、投资标的初筛、经营实态核验（中标合同流水是否活跃）、订单走势分析（逐年增长还是萎缩）、客户结构与大客户依赖度、履约能力评估、公开涉诉与行政处罚检索。基于全网招投标数据输出报告：经营实态用真实发生的中标合同流水说话、客户关系是真实合同关系、风险信息逐条附来源链接。支持单公司深度报告与双公司对比。即使用户没有提到「尽调」，只要想在投钱或合作前搞清楚一家公司的真实经营状况，都应使用本SKILL。注意边界：若用户给出一个具体的招标项目做该不该投的决策分析，使用 zlbx-bid-decision SKILL；若用户想主动挖掘商机/销售线索，使用 zlbx-opportunity-radar SKILL；若用户只是搜索/查询招中标公告数据，使用 zlbx-bidding SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhiliaobiaoxun · joined 7 days agoInstalls 1,096Last detonated 1 h ago
$clawhub install bidding-due-diligence
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:29 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 1,637 lines in 7 files.