contribution-distribution-designer@1.0.0
VERIFIEDPublisher claims: "当用户需要把多元要素贡献可信计量并公平分润、替代"资本主导、主观裁定"分配时使用—— 典型信号："怎么让多方按贡献公平分钱/分润""不想让平台抽成""怎么设计通证/积分分配规则" "怎么把用户贡献计量出来并自动发奖励""贡献即确权怎么落地成代码"。 适用：社区/平台设计者构建可代码化的经济模型（确权→计量→分配→可追溯）。 不适用：单纯做概念辨析或合规定性（用 S1 概念辨析器）；只问"怎么搭社区、怎么活跃用户" （用 S6 共建社区）；面向境内零售发行代币化融资（须先触发 S2 合规红线检查）。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
Process kill commandSKILL.md:108 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05No other findings across 349 lines in 4 files.