Skills/ClawHub/debtop-counterparty-check

debtop-counterparty-check@1.0.1

VERIFIED

Publisher claims: "合作方债务速查：给定一家企业名称，快速核查其公开债务线索，输出一页结论化速查卡——是否命中、债务规模（转让 / 处置口径的本金与利息）、最近公告时间、主要债权人与担保线索，用于商务合作、采购、投资、法务的前置参考。当用户说「要和 XX 合作，先查一下有没有债务」「XX 这家公司靠不靠谱 / 有没有债务风险」「签合同前帮我核一下对方」「合作方背景速查」时使用。只需企业名称，免注册免登录，输出为面向非专业用户的速查结论。英文触发词：counterparty check, company debt check, supplier risk check, vendor due diligence, q" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ninjaliang · joined 2 days agoInstalls 174Last detonated 38 h ago
$clawhub install debtop-counterparty-check
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File permission modification commandscripts/guest_token.sh:83 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

No other findings across 1,130 lines in 10 files.

debtop-counterparty-check@1.0.1 safety verdict: Verified 91/100 — KillerSkills