Skills/ClawHub/cue-after-market-assistant

cue-after-market-assistant@1.0.15

VERIFIED

Publisher claims: "今日A股盘后复盘与收盘市场分析：复盘今天大盘为什么涨跌、资金流向、板块表现，以及对你的持仓有什么影响、明天该盯哪些信号。覆盖上证指数、深证成指、创业板、科创50等指数与涨跌家数、量价关系、成交额；主力资金、北向资金/沪深港通、龙虎榜游资、两融余额；热点板块与概念、涨停与连板梯队、市场情绪；并从政策、事件、财报、外部冲击拆解涨跌驱动。可指定板块深挖当日主线，做次日情景推演与观察要点。只做大盘/板块层面的市场复盘，不分析单只个股（个股请用「短线走势与技术面分析」）。盯盘相关 skill 请搭配使用：今日盘前机会和盘中热点与催化剂追踪、或直接使用全天候盯盘助手。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher panting09266-ai · joined 6 days agoInstalls 1,077Last detonated 3 h ago
$clawhub install cue-after-market-assistant
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 85/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Privileged sudo commandSKILL.md:270 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:271 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05