Skills/ClawHub/bii-blackrock-note

bii-blackrock-note@1.1.0

VERIFIED

Publisher claims: "把 BII 范式的个股研判简报（A4 横向 · 封面+9 正册+12 增补册 · 左文字栏+右图表栏）整体重定向为「贝莱德智库（BlackRock Investment Institute）风格」，并一条龙产出 pptx + pdf + html 三件套。核心能力：① 全局色板重定向（35 类源色 → 品牌令牌，含 7 槽分类色相保真）；② 结构装饰注入（左侧黑书脊 / 顶部黑色色带 / 品牌黄书签 / 黑色持仓面板 / 黄头摘要框 / 三段式「免责声明｜页码｜文件编号」页脚）；③ 装饰件零净增量约束——保证 22 页版式不被挤爆；④ 七门体检，含「可见文本逐字零改动」比对。Use when 用户要求「把这份个股简报做成贝莱德智库风格」「按贝莱德智库的版式出 pptx/pdf/html」「给 BII 简报换个品牌风格」，或需要把已有 BII HTML 交付成三格式。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher yjkj999999 · joined 11 days agoInstalls 386Last detonated 5d ago
$clawhub install bii-blackrock-note
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedscripts/mkpptx.py:37 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/mkpptx.py:46 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/check_br.py:141 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/mkpptx.py:56 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05