Skills/ClawHub/llm-output-explainer

llm-output-explainer@1.0.0

CAUTION

Publisher claims: "卡帕西 LLM 输出讲解方法论（Explain It Like I'm ...）。当用户要求把复杂概念、论文、代码、产品、方案、调研结果"讲清楚/讲明白/深入浅出/通俗讲解/做个讲解/explain like I'm X"、要求面向特定受众（领导/客户/新员工/公众/跨部门）改写或呈现内容、或要求生成讲解类工件（STE100 受控语言文本、修辞性 Mermaid 图表、单文件 HTML 交互讲解页、Manim 讲解视频、一次性演示工具）时使用。流程：受众四问 → 决策矩阵选机制 → 分层拆解 → 生成 → 验收清单自检 → 交付。仅在用户需要"讲解/理解/呈现"时触发；普通总结、翻译、润色任务不要触发。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher lizhengbo95 · joined 5 days agoInstalls 231Last detonated 5d ago
What would fix thisWatchDispute verdict

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-10-29 and scored it 66/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
Python subprocess execution detectedscripts/env_check.py:23 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/env_check.py:81 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedscripts/env_check.py:41 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packagescripts/env_check.py:83 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

What would make this Verified

14 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim lizhengbo95: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  3. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim lizhengbo95