Skills/ClawHub/company-background-check

company-background-check@1.0.6

VERIFIED

Publisher claims: "企业背调助手。当用户给出一个公司主体(公司名/简称/公司链接),想做企业背景调查、背调、查公司底细时,必须使用此SKILL:企业背调、公司背景调查、企业画像、轻尽调(这家公司实力怎么样/靠不靠谱/中过什么标)、客户背景核验、合作方审查、竞争对手识别、供应商履约能力评估、公开风险检索。基于全网招投标数据输出招投标视角的背调报告:竞对是从投标重叠算出来的、实力是中标记录证明的、客户供应商是真实合同关系。支持单公司深度报告与双公司对比两种模式。即使用户没有提到「背调」,只要想搞清楚一家公司的业务、实力与风险,都应使用本SKILL。注意边界:若用户给出一个具体的招标项目做该不该投的决策分析,使用 zlbx-bid-decision SKILL;若用户想主动挖掘商机/销售线索,使用 zlbx-opportunity-radar SKILL;若用户只是搜索/查询招中标公告数据,使用 zlbx-bidding SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhiliaobiaoxun · joined 7 days agoInstalls 1,053Last detonated 1 h ago
$clawhub install company-background-check
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:29 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 1,636 lines in 7 files.