ez-math-model@1.2.0
VERIFIED· install onlyPublisher claims: "Use when solving CUMCM, MCM, ICM, or other mathematical modeling tasks that need contest problem intake, model selection, Python solving, figures, paper writing, quality audit, and packaged deliverables." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Access to sensitive file pathsSKILL.md:190 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05`.env.example`），**绝不**提交到 git。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/agent-research-aggregator/SKILL.md:211 · File type combined with upload action — agent may exfiltrate local data files
AST07Convert `synthesis.json` into PaperOrchestra input files:Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/literature-review-agent/SKILL.md:137 · File type combined with upload action — agent may exfiltrate local data files
AST07Use `workspace/deduped_candidates.json` as input to Phase 2.Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/paper-orchestra/SKILL.md:217 · File type combined with upload action — agent may exfiltrate local data files
AST07├── outline.json # Step 1 outputFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Access to sensitive file pathsexternal/paper-orchestra/setup.sh:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05# ── Step 1: .env ──────────────────────────────────────────────Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actionSKILL.md:78 · File type combined with upload action — agent may exfiltrate local data files
AST07| 06 | `pipeline/06-packaging-output.md` | 质量门评估完成 | `export_report.json`、`export_audit.json`、`output/paper/*` 四格式、`output/manifest.json`、`output.zip` |Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Access to sensitive file pathsexternal/paper-orchestra/setup.sh:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05if [ -f "$SCRIPT_DIR/.env.example" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/outline-agent/references/outline_schema.json:4 · File type combined with upload action — agent may exfiltrate local data files
AST07"description": "Schema for outline.json — output of the Outline Agent (Step 1 of arXiv:2604.05018, App. F.1).",Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)external/paper-orchestra/skills/content-refinement-agent/references/halt-rules.md:118 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)
AST01ΣdeltaFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.LOW
Rule modification attemptexternal/paper-orchestra/skills/literature-review-agent/references/s2-api-cookbook.md:110 · Rule modification attempt — overwriting existing instructions · informational: not an instruction file
AST01| `abstract` | string | yes (rule 2: must exist) |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/outline-agent/SKILL.md:111 · File type combined with upload action — agent may exfiltrate local data files
AST07- `references/example-output.json` — example output from the paperFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Access to sensitive file pathsexternal/paper-orchestra/setup.sh:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05# 1. Creates .env from .env.example (if not present) and prompts for API keysFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/agent-research-aggregator/scripts/format_po_inputs.py:5 · File type combined with upload action — agent may exfiltrate local data files
AST07Converts synthesis.json (Phase 3 output) into PaperOrchestra-compatible inputFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/literature-review-agent/scripts/bibtex_format.py:5 · File type combined with upload action — agent may exfiltrate local data files
AST07Reads citation_pool.json (output of dedupe_by_id.py) and emits a BibTeX fileFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Access to sensitive file pathsexternal/paper-orchestra/skills/agent-research-aggregator/scripts/discover_logs.py:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05".env", ".env.local", ".env.production", "credentials.json",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
File type combined with upload actiontools/verification-before-completion/SKILL.md:28 · File type combined with upload action — agent may exfiltrate local data files
AST07- `output/manifest.json`、`output.zip` 与 staging 发布证据一致。Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
Python subprocess execution detectedexternal/paper-orchestra/skills/paper-orchestra/scripts/check_tex_packages.py:98 · Python subprocess execution detected
AST05result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/paper-orchestra/SKILL.md:196 · File type combined with upload action — agent may exfiltrate local data files
AST07Then write `workspace/provenance.json` capturing input file hashes, outlineFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/paper-orchestra/SKILL.md:233 · File type combined with upload action — agent may exfiltrate local data files
AST07└── provenance.json # input/output hashes for reproducibilityFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionexternal/paper-orchestra/skills/section-writing-agent/scripts/extract_metrics.py:96 · File type combined with upload action — agent may exfiltrate local data files
AST07p.add_argument("--out", required=True, help="metrics.json output path")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionscripts/runtime/audit_quality.py:373 · File type combined with upload action — agent may exfiltrate local data files
AST07engineering_patterns = ["summary.json", "execution_log", "run_state.json", "artifact_manifest", "runtime/", "output/"]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Access to sensitive file pathsexternal/paper-orchestra/setup.sh:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05if [ ! -f "$SCRIPT_DIR/.env" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.Cost to the agent
Instructions loaded
≈31,831 tok
29 files · 175 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.