Skills/ClawHub/heyi-paid-api

heyi-paid-api@1.2.0

CAUTION· static only

Publisher claims: "Use when a user wants an AI agent to call Heyi's Xiaohongshu, Douyin, Kuaishou, or Bilibili HTTP APIs with a Bearer API Key, including endpoint discovery, point billing, balance checks, pagination, batching, error handling, retries, or usage reconciliation." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher heyi-byte · publishing for 70 daysInstalls 360Last detonated 4 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-08 and scored it 60/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: References a credential file in the home directory. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
URL with suspicious TLDSKILL.md:56 · URL with suspicious TLD — commonly used for phishing/malware本 Skill 用于调用 `https://bot.01011.top/api/external/` 下的 API Key 接口，包括公开目录、积分查询，以及公开目录中启用的小红书、抖音、快手、Bilibili 等接口。Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDsnapshots/catalog.json:3 · URL with suspicious TLD — commonly used for phishing/malware"base_url": "https://bot.01011.top",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
References a credential file in the home directorybin/publish-all.sh:16 · References a credential file in the home directory# NPM_TOKEN — npm 的 npm_xxx（或用 ~/.npmrc）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
MEDIUM
URL with suspicious TLDSKILL.md:9 · URL with suspicious TLD — commonly used for phishing/malwarehomepage: https://api.01011.topFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
npx invocation of non-well-known packagebin/install.js:281 · npx invocation of non-well-known package — may execute untrusted codeconsole.error('错误：找不到 SKILL.md。请通过 npx 安装，或在包根目录运行此脚本。');Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
URL with suspicious TLDSKILL.md:78 · URL with suspicious TLD — commonly used for phishing/malwareexport HEYI_API_BASE_URL="https://bot.01011.top"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
npx invocation of non-well-known packageSKILL.md:384 · npx invocation of non-well-known package — may execute untrusted code| `404` | `4040` | 接口不存在或已下线 | 先跑 `npx heyi-paid-api check` 确认是否本地下线；查公开目录替代接口；不扣费 |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
URL with suspicious TLDbin/install.js:171 · URL with suspicious TLD — commonly used for phishing/malware' --base-url <url> 覆盖远端 base URL（默认 $HEYI_API_BASE_URL，回落到 https://bot.01011.top）',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionbin/install.js:666 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` 输出路径: ${outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageSKILL.md:127 · npx invocation of non-well-known package — may execute untrusted code> `category` 二级能力分类（`search / detail / user / comment / interaction / playback / live / tool / statistics`）与 `sub_title` 入参提示已在后端实现，但**尚未部署到生产**。不要依赖这两个字段做筛选；上线后 `npx heyihub-skill check` 会以 `changed`Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.js:342 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(' 3. 运行 `npx heyihub-skill check` 验证本地 Skill 快照与远端接口目录是否一致。');Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:395 · npx invocation of non-well-known package — may execute untrusted code2. **接口是否还在**：跑 `npx heyihub-skill check`，看是否报 `retired`；或匿名 `GET /platform/public/endpoints/?keyword=<关键字>` 确认 `code` 还在目录里。Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.js:613 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(' 1. 升级 Skill：`npx heyihub-skill@latest`，或在维护侧重新运行 `snapshot`');Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/publish-all.sh:226 · npx invocation of non-well-known package — may execute untrusted codeCLAWHUB_BIN="${CLAWHUB_BIN:-npx -y clawhub@latest --registry=$CLAWHUB_API}"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:511 · npx invocation of non-well-known package — may execute untrusted codenpx heyihub-skill check # 或 npx heyihub-skill checkFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:460 · npx invocation of non-well-known package — may execute untrusted code**Q4：`npx heyihub-skill check` 一直报 `retired` / `changed`，怎么办？**Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
URL with suspicious TLDSKILL.md:65 · URL with suspicious TLD — commonly used for phishing/malware- API Base URL：`https://bot.01011.top`。Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionbin/install.js:687 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` ✓ 已写入 ${snapshot.endpoints.length} 个接口到 ${outputPath}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagebin/publish-all.sh:236 · npx invocation of non-well-known package — may execute untrusted codewarn "执行： npx clawhub login --no-browser"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.js:198 · npx invocation of non-well-known package — may execute untrusted code// 1. npx 安装到 npx 缓存后，bin/install.js 与 SKILL.md 同目录（标准）Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
URL with suspicious TLDbin/install.js:16 · URL with suspicious TLD — commonly used for phishing/malwareconst DEFAULT_BASE_URL = 'https://bot.01011.top';Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL with suspicious TLDSKILL.md:32 · URL with suspicious TLD — commonly used for phishing/malwaredefault: https://bot.01011.topFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈3,835 tok
1 file · 10 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

20 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim heyi-byte: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. References a credential file in the home directory≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. URL with suspicious TLD≈ +2 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
  4. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
  5. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim heyi-bytePropose a patch to the maintainer