hugo-blog-tool-pro@1.0.1
VERIFIEDPublisher claims: "面向专业博主的 Hugo 博客管理工具，提供批量发布与站点级管理能力。核心能力: - 批量文章发布与定时发布调度 - 多语言站点（i18n）内容管理 - SEO 优化（结构化数据、站点地图、元信息） - CI/CD 自动化部署集成 - 文章系列管理与交叉引用 - 图片资源自动优化与 CDN 集成 适用场景: - 多作者博客团队的协作发布 - 多语言博客站点的同步管理 - SEO 优化的技术博客运营 - 自动化部署的持续发布流程 差异化: 专业版兼容免费版所有发布能力..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-01 and scored it 86/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Privileged sudo commandSKILL.md:195 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05No other findings across 538 lines in 2 files.