cue-employee-stock-ownership-cn@0.1.1
VERIFIED· install onlyPublisher claims: "A股员工持股计划条款速读：输入一份员工持股计划草案或相关公告，产出八项逐字卡——计划名称与期次、参加对象与确定标准、资金来源、股票来源、受让价格与规模、存续期与锁定期、管理模式与持有人会议、变更终止与权益处置。每项挂原句＋锚，缺的点名「未检索到」；受让价格与标的股票数量各自要有落点，交易均价·收盘价·面值·股本总额等参照数不顶本格账。值不值得参与·价格公不公允·能否解锁·个税与递延纳税一律 [待人工]。Do NOT use for: 参与建议、方案设计、税务判断、代办。Triggers: 员工持股条款 / 员工持股计划草案怎么写" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 1,644 lines in 11 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.