Skills/ClawHub/danuzhu-novel-master

danuzhu-novel-master@1.1.0

CAUTION· static only

Publisher claims: "大女主小说创作主编。仅在用户明确表达「我要写/创作/帮我写一部大女主小说」的创作意图时触发。触发条件：用户消息中需同时包含(1)创作动词（我要写、帮我写、创作、帮我编、写一本、编一部等）+(2)女性向/大女主相关词（大女主、女频、宫斗、宅斗、女强、重生复仇等）。纯讨论/评价/引用不触发。避免因消息中偶然包含「大女主」「宫斗」「女强」等词汇而误触发。本skill是主编角色，负责协调子skill完成从大纲到成品的小说全流程。默认短篇，用户指定篇幅则按用户来。支持断点续写。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher kongzichixiangjiao · publishing for 152 daysInstalls 890Last detonated 5d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-10 and scored it 63/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: False input termination marker; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

CRITICAL
False input termination markerSKILL.md:247 · False input termination marker — attempts to end user input section--- END DATA ---Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsSKILL.md:323 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 不含 `..`，不指向 `/etc`、`/System`、`/bin`、`~/.ssh` 等系统目录Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈6,396 tok
12 files · 53 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

17 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim kongzichixiangjiao: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. New publisher≈ +3 on the totalTime clears this on its own after 14 and 30 days. Claiming the handle (+50) is the fastest way past it.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim kongzichixiangjiaoPropose a patch to the maintainer