Skills/ClawHub/linkfox-skill-evaluator

linkfox-skill-evaluator@1.0.0

VERIFIED· install only

Publisher claims: "Evaluate whether a skill is both safe to run and effective at its job. Use when the user wants to test, benchmark, grade, critique, audit, vet, or compare versions of a skill — phrases like "这个 skill 好不好"、"evaluate this skill"、"vet this skill"、"新版本比旧版本好吗"、"帮我测测这个 skill"、"这个 skill 安全吗"、"skill 有没有效果"、" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher lienong1122334 · publishing for 88 daysInstalls 410Last detonated 12 h ago
$clawhub install linkfox-skill-evaluator
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files**认知 1：安全和质量始终并行评估。** 一个 skill 即便效果再好，只要它偷偷读 `~/.ssh` 或往外发数据，就不能用——所以安全检查是每次评估的底线，不是"可选项"。反过来，一个 skill 即便再安全，产出不达标也没价值。两个维度同时跑，不让用户做取舍。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…静态扫描 + 行为观察都用这张表） | 级别 | 症状 | 处置 | |------|------|------| | ⛔ **EXTREME** | 读 `~/.ssh`、`~/.aws`、`~/.config`；访问 agent 持久记忆或身份配置文件（各框架的 memory / identity / system prom…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
References a credential file in the home directorySKILL.md:210 · References a credential file in the home directory- **含至少一条负向断言**：skill *不应该*做什么也要写出来（例："未读取 `~/.aws/credentials`"、"无占位符 [TODO]"）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
HIGH
Access to sensitive file pathsSKILL.md:131 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **凭据 / 敏感路径触碰**：有没有 grep 过 `~/.ssh`、`~/.aws`、`.env`、agent 记忆文件或身份配置？Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈4,268 tok
1 file · 9 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.