enterprise-bidding-decision-agent@1.0.6
VERIFIEDPublisher claims: "企业投标决策智能助手（知了标讯官方）。当用户给出一个具体的招标项目（公告链接/项目标题/招标文件），并希望进行投标决策相关分析时，必须使用此SKILL：该不该投/值不值得投、投标决策、标前分析、竞争对手预测（谁会来投标）、中标概率评估、报价参考/建议报价、采购方倾向分析、废标风险评估。基于知了标讯全网招中标历史数据输出带结论的决策报告。即使用户没有提到「投标决策」，只要涉及某个具体标该不该投、投标评估、竞争分析、报价参考等需求，都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,237 lines in 7 files.