it-project-opportunity-radar@1.0.8
VERIFIEDPublisher claims: "IT信息化商机雷达。当用户想挖掘IT行业早期商机（信创/国产化/软件开发/系统集成/云/数据中心/网络安全/智慧城市等）时，必须使用此SKILL：数字化拟建项目查询（智慧城市/数字政府立项阶段，提前6-18个月）、IT采购意向（发标前1-3个月）、运维与软件服务临期续约（IT服务续约窗口价值高）、按预算与紧急度排序、甲方单位跟进建议。给一个技术领域/地区即输出按价值排序的商机清单。即使用户没有提到「IT」，只要涉及信息化项目线索、信创商机、数字化项目早期发现等需求，都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,264 lines in 7 files.