Skills/ClawHub/house-ops

house-ops@1.0.8

CAUTION

Publisher claims: "驱动 agent 的一体化购房决策体系：需求画像、政策税费、城市规划、市场动态四路输入合成同一套判断； 扫描挂牌、用成交价锚点交叉验证、六维评分，产出 Markdown 报告与 TUI 操作台。每个数字标注来源档位， 无法证实存在的房源整份作废而非降权。当用户粘贴房源链接或描述、想明确购房需求、速筛/扫描/对比房源、 深挖某套房源、审合同、记录带看、要谈判沟通建议或管理关注清单时使用。 English: Agent-driven home-buying decision system — needs profile, policy and taxes, urban planning and market movement folded into one judgment; scans listings, cross-checks asking price against deal-price anchors, scores six dimensions, writes Markdown reports and a TUI console. Every figure carries a source tier; a property that cannot be verified is voided, not downgraded. Use when the user pastes a property listing URL or description, wants to clarify home-buying needs, triage, scan, compare or deep-dive listings, review a purchase contract, record a viewing, ask for negotiation advice, or manage the watchlist." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ohwald · joined 4 days agoInstalls 358Last detonated 4d ago
What would fix thisWatchDispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 79/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Destructive command against a filesystem root or device; Instructs the agent to modify its persistent memory or instruction files; Destructive file system command detected. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Destructive command against a filesystem root or devicescripts/selftest.mjs:739 · Destructive command against a filesystem root or deviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Instructs the agent to modify its persistent memory or instruction filesscripts/doctor.mjs:25 · Instructs the agent to modify its persistent memory or instruction filesFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Destructive file system command detectedscripts/selftest.mjs:739 · Destructive file system command detectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/doctor.mjs:25 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

What would make this Verified

1 point to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Destructive command against a filesystem root or device≈ +9 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  2. Unclaimed publisher≈ +8 on the totalClaim ohwald: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim ohwald