owner-supplied-material-check-free@1.0.51
VERIFIEDPublisher claims: "甲供材台账与分包领用逐项核对，领用数量 = 进场数量 − 退库数量、领用金额 = 领用数量 × 单价、结算抵扣金额 = 领用金额，逐行复算并做合计勾稽与重复材料行、空缺与负值检测，每条结论引用台账原文行号。触发词包括 甲供材对不上、分包领用核对、甲供材抵扣金额、超领扣款、退库没冲减。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 743 lines in 5 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.