Skills/ClawHub/blog-writer-zh

blog-writer-zh@1.1.0

VERIFIED· install only

Publisher claims: "用中文撰写科技/行业思辨类文章，风格理性犀利、结构清晰。适用场景：用户想写个人思考感悟、科技评论、行业分析、公众号/知乎/小红书长文，或需要润色、扩写、改写现有内容时。触发关键词包括"写篇文章"、"帮我写一篇关于"、"整理一下我对……的思考"、"写个分析"、"深度思考"、"发公众号"、"知乎专栏"、"小红书文案"..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher xavier-ljf · publishing for 173 daysInstalls 1,167Last detonated 38 min ago
$clawhub install blog-writer-zh
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 85/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`BLOG_REFERENCES_DIR` 环境变量指定风格参考文章的存放路径，由技能目录下的 `.env` 文件管理。每次调用时会自动解析该文件并注入环境变量。如果已设置且路径有效，技能会在写作前阅读参考文章校准风格；如果未设置，则表示没有参考文章，不影响技能正常使用。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files1. 检查 `skills/blog-writer-zh/.env` 文件是否存在Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/export.py:103 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsSKILL.md:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **提供路径** → agent 将 `BLOG_REFERENCES_DIR=/用户的/路径` 写入 `skills/blog-writer-zh/.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,206 tok
1 file · 5 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.