news-aggregator-tool-free@1.0.0
VERIFIEDPublisher claims: "新闻聚合工具免费版，自发聚合国内外社会、科技、军事领域的新闻，通过搜索、筛选、整理产出结构化新闻汇总。核心能力: - 聚合国内科技、军事新闻源 - 自发搜索、筛选、去重新闻要点 - 按类别整理新闻，每条含标题、来源、要点 - 可信度规则过滤，优先官方权威来源 适用场景: - 个人用户每日新闻浏览 - 学生了解社会时事 - 独立开发者跟踪科技动态 差异化: - 免费版覆盖核心新闻类别，满足日常资讯需求 - 自发筛选去重，提升阅读效率 - 与PRO版本完全兼容..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 404 lines in 2 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.