iaiops-pharma@0.34.1
CAUTION· static onlyPublisher claims: "Pharmaceutical-manufacturing edition of iaiops — GMP drug/biologics plants as a distinct vertical from generic buildings and municipal water. BACnet/IP BMS+EMS (cleanroom pressure cascade, temperature/RH), Modbus (PW/WFI skids, stills, EDI, analysers), HART-IP (conductivity / TOC / level transmitters), OPC-UA (DCS, bioreactors, plant SCADA), plus the cross-protocol brain. Three signature checks: cleanroom_pressure_cascade (EU GMP Annex 1 cascade, door by door), cleanroom_particle_check and pharma_water_check (USP 645 stage-1 procedure). Use when the task mentions pharma, 制药, 药厂, GMP, cleanroom / 洁净室 / 洁净区, Annex 1, 压差梯度, pressure cascade, grade A/B/C/D, 尘埃粒子 / particle count, EMS / 环境监测, PW / WFI / 纯化水 / 注射用水, TOC, 电导率, conductivity, bioreactor / 生物反应器, 冻干机 / lyophilizer, 灌装线 / filling line, CSV, IQ/OQ, Annex 11, Part 11, or 数据完整性 / ALCOA. Read-first; BACnet writes are MOC-gated." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-14 and scored it 72/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
No findings across 252 lines in 2 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
8 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim zw008: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.