Skills/ClawHub/debtop-enterprise-profile

debtop-enterprise-profile@1.0.9

VERIFIED

Publisher claims: "企业公告债务画像:给定一家企业名称,汇总其在公开渠道发布的债权转让 / 处置公告信息——公告条数、公告披露的本金与利息合计、涉及的相关主体、公告时间线与公告披露的担保信息。当用户说「把 XX 这家企业相关的公开公告汇总一下」「XX 有哪些公开债权公告」「XX 有没有公开的公告信息」,或给出企业名称要求汇总其公开公告与公告披露的债权方线索时使用。只需企业名称,免注册免登录。本技能仅对公开公告做只读检索与原文汇总,不提供征信报告、信用或风险评级、投资建议,不参与债权交易、处置或任何撮合服务。英文触发词:enterprise notice summary, company notice digest" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ninjaliang · joined 2 days agoInstalls 500Last detonated 33 h ago
$clawhub install debtop-enterprise-profile
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File permission modification commandscripts/guest_token.sh:83 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

No other findings across 1,125 lines in 10 files.