Skills/ClawHub/majia-siyu

majia-siyu@2.1.1

VERIFIED

Publisher claims: "私域专家团 · 马甲实战版(majia-siyu)。处理朋友圈、群发、欢迎语、企微引流、私域诊断、整盘搭建、厂商选型/竞品/报价/市场地图、客户档案与任务后导航。门店拉新、加盟店推不动、总部还是门店发、企微任务转发和加好友、台卡、码放哪、先进群还是先加好友、推送前准备、效果怎么算、分层召回、企微从零搭,这些有马甲的真实案例,先读本入口再答。涉及厂商、产品、价格、功能、案例、政策、平台规则或公司存续时,必须实时联网核验并附证据;不能联网时不得输出具体动态事实。 边界:会员指标口径、RFM、复购/留存公式、SQL/DDL、数仓、字段词典、数据质量、会员看板这类数据交付物不触发本 Skill,改用 majia-huiyuan,召回/提频/防流失的数据依据也在那边;模糊的私域经营问题先由本入口诊断,出现“怎么算、口径、SQL、表、看板、数据核验”才转 majia-huiyuan。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher maojiebc · joined 12 days agoInstalls 1,490Last detonated 6d ago
$clawhub install majia-siyu
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packagemodules/siyu-update/SKILL.md:30 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagemodules/siyu-update/SKILL.md:41 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06