Skills/ClawHub/cue-cn-research-brief

cue-cn-research-brief@0.1.0

CAUTION

Publisher claims: "多源研究速览起草：输入是一批中文来源（网页／公告／报道／解析件）或一个待查问题，产出是四节速览——一句话结论、逐条发现（每条一个 [S#] 锚）、未取到与口径、来源（逐条带 URL 与检索日）。机检 check_brief.py 四道：形制／锚／判断词／未取到点名，零网络。适合投前初筛、行业快讯、竞品多点对照、政策多源核对。Do NOT use for: 评级、目标价、买卖与时机建议（一律 [待人工]）、单一来源的转述（那只是摘要）、逐数核口径的财报深度点评（走姊妹件那一路）、最终决议（本件只起草，用户负终审）。Triggers: 多源速览 / 研究速览 / 中文源核对 / 带出处的要点清单" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 30Last detonated 37 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packageREADME.en.md:26 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Destructive file system command detectedREADME.en.md:10 · Destructive file system command detected

AST05

HIGH

npx invocation of non-well-known packageREADME.md:26 · npx invocation of non-well-known package — may execute untrusted code

AST06