Skills/ClawHub/motor-pid-tuner

motor-pid-tuner@1.1.0

VERIFIED· install only

Publisher claims: "电机控制PID/PI参数计算与调参诊断工具。当用户需要计算电机FOC电流环/速度环/位置环PI参数、PID调参、电机控制参数整定、PID参数不知道怎么定、电机转起来抖动/震荡/嗡嗡响排查、电机响应慢/超调大、电机控制入门、Ziegler-Nichols调参、电机参数辨识、PID代码生成、调参故障诊断(震荡/超调/稳态误差)、阶跃响应仿真、参数灵敏度分析、离散化方法对比、弱磁控制参数、观测器增益计算、电机参数库查询、带宽自动建议、MATLAB导出、SVPWM代码生成、多平台适配(STM32/GD32/C2000)、参数反算、抗积分饱和(anti-windup)、死区补偿、多采样率控制、稳定性裕度分析(相位裕度/幅值裕度)、参数合理性校验、故障保护阈值(过流/过压/过温/堵转/I2t)、温度补偿(Rs/磁链温漂)、无感启动策略(I/F开环/高频注入)时使用。覆盖PMSM/BLDC/有刷直流电机的PI/PID控制器设计。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher liujycode · publishing for 22 daysInstalls 35Last detonated 26 h ago
$clawhub install motor-pid-tuner
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

LOW
Prompt injectionskill-card.md:27 · Prompt injection — explicit attempt to bypass safety measures · informational: not an instruction file…ions. Mitigation: Independently review gain conversion and stability analysis; avoid safety-critical motor tuning until those concerns are resolved, and validate reviewed …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

No other findings across 5,016 lines in 5 files.

Cost to the agent

Instructions loaded
≈3,418 tok
1 file · 5 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

motor-pid-tuner@1.1.0 safety verdict: Verified (install only) — KillerSkills