bocha@1.0.2
VERIFIEDPublisher claims: "博查 Web 搜索（Bocha Web Search）——中文优先、中国大陆直连的联网搜索。适用于中文查询、时效性信息、事实核查与带引用的回答。(Chinese-first web search with direct China mainland access. Use for Chinese-language queries, time-sensitive information, fact-checking, and citation-backed answers.)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
No findings across 155 lines in 2 files.