medical-equipment-opportunity-radar@1.0.8
VERIFIEDPublisher claims: "医疗设备商机雷达。当用户想挖掘医疗行业早期商机(医疗设备/器械/耗材/检验试剂/医院信息化等)时,必须使用此SKILL:医院新建改扩建拟建项目(设备采购的最上游信号,提前6-18个月)、卫健系统采购意向(发标前1-3个月)、设备维保与服务临期续约、按预算与紧急度排序、采购单位跟进建议。给一个产品线/地区即输出按价值排序的商机清单。即使用户没有提到「医疗」,只要涉及医院采购线索、设备销售商机、卫健项目早期发现等需求,都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,260 lines in 7 files.