cnsdoce@2.0.1
VERIFIED· install onlyPublisher claims: "中国工程造价技能，支持安装工程/建筑工程/市政工程/园林绿化工程定额查询、组价计算与报价表生成。 数据源支持两种模式（见下方说明）： · 默认模式：大模型推理数据（无需本地数据库，推荐新手） · 唯一来源模式：严格限定为山东省消耗量定额(2025版) + 济南市价目表(2026版) 核心依据：《建设工程工程量清单计价标准》GB/T 50500-2024（2025年9月1日起实施）。 当用户询问以下场景时触发本技能：定额子目查询（章节号+条款号溯源）、 安装工程组价（13分册）、建筑工程/市政工程/园林绿化工程取费计算、 Excel报价表生成、山东/济南价目表查询。 技能内置 quota_reference.db（34条全专业费率）与 fee_standard.md（完整取费标准）。 ⚡v2.0.0：组价前强制比对清单单位与定额单位（Step 0）；LLM端点迁移TokenHub； 信息价更新至2026年第6期；新增AI组价引擎/价格自检/指标引擎三大能力。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 8,489 lines in 32 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.