Skills/ClawHub/g1geo

g1geo@1.1.0

CAUTION· static only

Publisher claims: "极义GEO — 生成式搜索引擎优化平台。监控品牌在 DeepSeek、Kimi、通义千问、豆包、文心、腾讯元宝等 AI 搜索中的可见度、提及率、推荐与排名，支持竞品对比和批量诊断；生成 GEO 问题与文章，提供 AI 改写、文章裂变、企业知识与素材管理、报告和趋势跟踪，并分发至 抖音/小红书/知乎等11+ 自媒体平台或 GEO 媒体。适用于 GEO 优化、品牌 AI 搜索表现分析、内容生成与多平台发布。用户提到极义GEO、G1GEO、g1geo、AI生成优化或要求执行 g1geo 命令时使用，也应用于GEO文章生成，内容分发等场景。执行命令前先加载与已安装 CLI 版本匹配的指南。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher mzoob · publishing for 114 daysInstalls 2,773Last detonated 4d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-10 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

LOW
Unpinned dependencySKILL.md:28 · Unpinned dependencynpm install --global @g1geo/cli@latestFix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.
AST06

No other findings across 106 lines in 2 files.

Cost to the agent

Instructions loaded
≈589 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

12 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim mzoob: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Unpinned dependencies≈ +1 on the totalPin exact versions (and ideally hashes) in package.json, requirements or the install script so the bundle cannot change under you.
  3. Unpinned dependency≈ +1 on the totalPin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim mzoobPropose a patch to the maintainer