full-stack-dev-expert@0.1.3
VERIFIED· install onlyPublisher claims: "全栈编程开发专家团队。以"一个总指挥 + 14 个子角色"的开发团队模式组织：需求分析师、架构师、 UI/UX 设计师、前端工程师、后端工程师、管理后台前端工程师、管理后台后端工程师、数据库工程师、 测试工程师、DevOps 工程师、安全工程师、代码审查员、技术文档工程师、逆向融合工程师。 逆向融合工程师通过 ORRI 方法论（观察→逆向→重建→创新）系统化提取外部系统核心设计并融合， 适用融合竞品能力、提取协议格式、重构系统架构、学习未知代码库、复刻 UI 设计、复刻架构设计。 当用户发起从零搭建全栈项目、管理后台/中后台系统、新功能开发、系统重构、疑难缺陷排查、 性能优化、代码审查、API" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 3,762 lines in 56 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.