cybersecurity-engine-tool-free@1.0.4
VERIFIEDPublisher claims: "网络安全评估引擎免费版,为个人开发者包含基础安全评估与威胁建模能力. 适合需要cybersecurity engine tool相关能力的开发场景,包含结构化的工作流程和可复用的模板,帮助用户快速完成任务并保持代码质量。网络安全评估引擎免费版为个人开发者提供轻量级网络安全评估能力,涵盖安全态势检查、OWASP Top 10基础审计与威胁建模核心流程。免费版无需安装额外工具,通过纯知识驱动的方式帮助开发者快速识别项目中的安全风险,适合项目上线前的快速安全自查." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-31 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Access to sensitive file pathsSKILL.md:185 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05No other findings across 492 lines in 2 files.