Is linkpix-happyhorse-clone@0.1.4 safe to install?

Skills/ClawHub/linkpix-happyhorse-clone

linkpix-happyhorse-clone@0.1.4

VERIFIED

Publisher claims: "帮助短视频创作者、电商运营团队通过青虎AI完成“HappyHorse 1.1 爆款视频复刻”：快速分析抖音、TikTok、快手等平台的短视频爆款逻辑，利用1.1版本的强运镜与转场控制，一键复刻出高质量的爆款投放素材。适用场景包括：淘宝逛逛、抖音带货、快手好物、小红书种草、TikTok广告投放、YouTube Shorts引流等，让中小企业不需要专业导演也能实现“像素级”的爆款二创，助力店铺快速起量。 Use this skill for HappyHorse1.1爆款复刻, 爆款转场, 爆款分析, 抖音, 快手, 小红书, TikTok, YouTube Shorts, 二创, 投放素材, AI视频复刻。通过青虎AI统一接入，支持视频分析、任务轮询和结果下载。当用户要求用 HappyHorse 1.1 爆款视频复刻或 Happy Horse 1.1 / HappyHorse 1.1 复刻/对标/照着做爆款视频时必须触发。关键词：LinkPix、qhkit、青虎、HappyHorse、爆款复刻、爆款转场、抖音、快手、小红书、TikTok、YouTube Shorts、投放素材。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher autoagc · joined 1 days agoInstalls 667Last detonated 12 h ago

$clawhub install linkpix-happyhorse-clone

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

npx invocation of non-well-known packageSKILL.md:57 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageSKILL.md:95 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

LOW

Unpinned dependencySKILL.md:81 · Unpinned dependencyFix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.

AST06