Skills/ClawHub/manufacturing-ops-pack-free

manufacturing-ops-pack-free@1.0.25

VERIFIED

Publisher claims: "把制造与生产底稿按 14 项检查（生产投入产出与报废率、材料成本差异分摊、材料领用与定额损耗、工时与人工成本分摊、BOM用量与损耗差异、委外加工费与损耗、模具与工装摊销、设备维保与备件领用费用、固定资产盘点账实、存货出入库与加权平均成本、分包结算与产值、安全生产费用提取与使用、仓库周转与呆滞库存、证照与特种设备年检到期台账）逐个对象核一遍，每个对象一行结论，结论都带原文文件与行号。完全本地运行，核对过程不需要联网、不需要 API Key、没有次数上限。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher chenqg618 · joined 7 days agoInstalls 402Last detonated 1 h ago
$clawhub install manufacturing-ops-pack-free
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
File type combined with upload actionSKILL.md:82 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

No other findings across 6,591 lines in 19 files.

Cost to the agent

Instructions loaded
≈1,059 tok
1 file · 19 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.