Skills/ClawHub/npa-valuation-engine

npa-valuation-engine@3.0.1

VERIFIED

Publisher claims: "法拍与不良资产全栈估值定价引擎：折价口径对齐、折价可修复性打分、三情景 IRR/MOIC、投标上限反推，并生成可审计的 xlsx 估值模型。触发词：法拍、不良资产、NPL、资产包、投标上限、折价率、IRR、MOIC、处置、尽调、债权转让、AMC、回收率、抵押物、个贷不良、对公不良。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher lingyu9495-source · joined 9 days agoInstalls 274Last detonated 2 h ago
$clawhub install npa-valuation-engine
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedscripts/verify_model.py:73 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

No other findings across 5,591 lines in 39 files.