Is huawei-cloud-daily-hot-topics@1.0.0 safe to install?

Skills/ClawHub/huawei-cloud-daily-hot-topics

huawei-cloud-daily-hot-topics@1.0.0

VERIFIED

Publisher claims: "Query and display today's hot topics in one shot: fetch a ranked hot list (rank / title / hot value / source) from public, authentication-free hot-list REST APIs over HTTPS (read-only), normalise the results and print them as a readable Markdown table by default (plain text and JSON are also available). Providers are abstracted and tried in order, degrading to a bundled sample dataset — clearly marked as sample data — when the network or every provider is unavailable, so a single run always yields a readable result without crashing. Implemented with the Python 3 standard library only; it does not call the Huawei Cloud CLI, any Huawei Cloud SDK, or any Huawei Cloud REST API, requires no AK/SK credentials, and touches no cloud resource. Triggers include: "查询今日热点", "今日热点榜单", "热门话题", "今日热搜", "热点榜", "daily hot topics", "today hot list", "trending topics"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher wlc-dev · joined 5 days agoInstalls 0Last detonated 2 h ago

$clawhub install huawei-cloud-daily-hot-topics

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 86/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

Dense URL-encoded contentscripts/sample_data.json:6 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contentscripts/sample_data.json:8 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contentscripts/sample_data.json:7 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contentscripts/sample_data.json:9 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contentscripts/sample_data.json:10 · Dense URL-encoded content — may be obfuscating payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07