Is dlt-skill@1.0.0 safe to install?

dlt-skill@1.0.0

CAUTION· static only

Publisher claims: "大乐透诚实理性助手 · 一份不忽悠的大乐透报告：随机性检验、选号法打假、胆拖优化、合买覆盖、诚实账本与预算守护、玩家防坑教育、网点雷达，只讲真话、只做伤害减损。当用户说"分析大乐透/大乐透预测/生成大乐透报告/大乐透中奖概率/彩票能不能预测/选号法有没有用/大乐透随机性检验/大乐透胆拖方案/大乐透合买/拼单/大乐透账本/预算/防坑/体彩网点/超级大乐透分析/大乐透开奖模式/大乐透历史统计"时使用。生成严谨分析报告，内置对"预测力"的统计证伪（前区熵效率/任一组合恒等概率/样本外回测/no_edge 结论）、22 项自检护栏。核心立场：数学上任何选号法都不优于随机、期望为负，本 skill 不承" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher hmily741963 · publishing for 82 daysInstalls 398Last detonated 6d ago

What would fix this Watch Dispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-08 and scored it 63/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM

Python subprocess execution detecteddlt_smart.py:305 · Python subprocess execution detectedsubprocess.run([PYTHON, "dlt_enhance.py"], cwd=WORK_DIR,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

File type combined with upload actiondlt_expert_scraper.py:305 · File type combined with upload action — agent may exfiltrate local data files

print(f"  ✓ input.txt 已贡献 {input_contributed} 位当期真实专家, 跳过 live/search 兜底(避免混入非当期/历史数据)")

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

Python subprocess execution detecteddlt_healthcheck_all.py:258 · Python subprocess execution detected_prelaunch[script] = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL with suspicious TLDdlt_huiniao_api.py:4 · URL with suspicious TLD — commonly used for phishing/malwareAPI: https://api.huiniao.top/interface/home/lotteryHistory?type=dlt&page=1&limit=100Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detecteddlt_restore.py:125 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_backup.py:126 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_restore.py:74 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_smart.py:153 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL with suspicious TLDdlt_huiniao_api.py:81 · URL with suspicious TLD — commonly used for phishing/malwareurl = "https://api.huiniao.top/interface/home/lotteryHistory?type=dlt&page=1&limit=100"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detecteddlt_healthcheck_all.py:295 · Python subprocess execution detectedreturn subprocess.run([PYTHON, script], cwd=WORK_DIR,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL with suspicious TLDdlt_huiniao_api.py:39 · URL with suspicious TLD — commonly used for phishing/malwareurl = f"https://api.huiniao.top/interface/home/lotteryHistory?type=dlt&page={page}&limit={limit}"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detecteddlt_smart.py:600 · Python subprocess execution detectedr = subprocess.run([PYTHON, "dlt_expert_tracker.py"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_healthcheck_all.py:338 · Python subprocess execution detectedr = subprocess.run([PYTHON, "-m", "py_compile", fp],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

URL with suspicious TLDdlt_huiniao_api.py:162 · URL with suspicious TLD — commonly used for phishing/malwareurl = "https://api.huiniao.top/interface/home/lotteryHistory?type=dlt&page=1&limit=1"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Python subprocess execution detecteddlt_smart.py:561 · Python subprocess execution detectedr = subprocess.run([PYTHON, "dlt_healthcheck_all.py"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_healthcheck_all.py:944 · Python subprocess execution detectedr = subprocess.run(["schtasks", "/query", "/tn", task_name, "/xml", "ONE"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_auto.py:2299 · Python subprocess execution detected_enh = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_smart.py:581 · Python subprocess execution detectedr = subprocess.run([PYTHON, "dlt_expert_scraper.py", "--auto"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_healthcheck_all.py:843 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detecteddlt_watchdog_win.py:91 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

LOW

Prompt injectiondlt_performance.json:748 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file"dan": [],Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

MEDIUM

Python subprocess execution detectedrun_dlt.py:68 · Python subprocess execution detectedrc = subprocess.run(cmd, cwd=LIB_DIR).returncodeFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

LOW

Prompt injectiondlt_performance.json:146 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file"dan": [],Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

LOW

Prompt injectiondlt_performance.json:597 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file"dan": [],Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

MEDIUM

Python subprocess execution detecteddlt_watchdog_win.py:293 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedrun_dlt.py:273 · Python subprocess execution detectedsubprocess.run([PY, os.path.join(LIB_DIR, "dlt_enhance.py")], cwd=LIB_DIR,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

LOW

Prompt injectiondlt_performance.json:899 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file"dan": [],Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

MEDIUM

Python subprocess execution detecteddlt_watchdog_win.py:124 · Python subprocess execution detectedrx = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

LOW

Prompt injectiondlt_performance.json:303 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file"dan": [],Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

LOW

Prompt injectionREADME.md:274 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file

- **验证**：相邻目标期胆拖 dan/back 候选明显不同（26086→`[26,29,15]+[19,4,14,10]` 后`[2,6,9,11]`；26087/88/89 候选各异）；报告胆拖卡现显示"后区 4 码"+`C(4,2)=6` 组。

Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

Cost to the agent

Instructions loaded

≈4,571 tok

1 file · 65 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

17 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%

Unclaimed publisher≈ +8 on the totalClaim hmily741963: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
URL with suspicious TLD≈ +2 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.

Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim hmily741963 Propose a patch to the maintainer