Skills/ClawHub/patent-disclosure-skill

patent-disclosure-skill@4.5.0

CAUTION· install only

Publisher claims: "中国专利技能：挖掘专利点与编写交底书（发明/实用/外观），把已有交底改写成申请文件四件套，也可按材料交底申请一起做，按著录字段检索公布公告，通俗解读专利，对照审查口径出政策简报，辅助审查答复。| China patents skill: mine patent points and draft disclosures, rewrite an existing disclosure into application documents, or chain disclosure-then-application from inventor materials in one pass (ask wh" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher handsomestwei · publishing for 137 daysInstalls 3,244Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 79/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Hidden zero-width characters detected; Hidden zero-width characters detected; Hidden zero-width characters detected. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run

Static findings

HIGH
Hidden zero-width characters detectedskills/patent-reader/tools/shared/__init__.py:1 · Hidden zero-width characters detected — may conceal content# patent_reader.sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedskills/patent-reader/tools/analyze/__init__.py:1 · Hidden zero-width characters detected — may conceal content# patent_reader.analyzeFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedskills/patent-reader/tools/extract/__init__.py:1 · Hidden zero-width characters detected — may conceal content# patent_reader.extractFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/bootstrap_cad_venv.py:69 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Hidden zero-width characters detectedskills/patent-disclosure/tests/__init__.py:1 · Hidden zero-width characters detected — may conceal contentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Python subprocess execution detectedskills/patent-docket/tools/stdio_utf8.py:34 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionskills/patent-disclosure/references/schemas/figure_plan.schema.yaml:6 · File type combined with upload action — agent may exfiltrate local data files落盘约定（交底）：案件工作目录 **`figure_plan.yaml`**（或等价 `figure_plan.json`），与 `structure_schema.*` / `appearance_schema.*` 同级（常见 `outputs/{案件标识}/`）。Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/patent-disclosure/references/schemas/formula_plan.schema.yaml:6 · File type combined with upload action — agent may exfiltrate local data files落盘：案件工作目录 **`formula_plan.yaml`**（或 `.json`），常见 `outputs/{案件标识}/`。Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/run_step_to_views.py:29 · Python subprocess execution detectedproc = subprocess.run(cmd, env=env)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/cad_venv.py:72 · Python subprocess execution detectedout = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/patent-oa/prompts/ingest_playbook.md:30 · npx invocation of non-well-known package — may execute untrusted code脚本会：探测本机 skill 目录 → 已装则用；未装则请求 GitHub [`virgiliojr94/book-to-skill`](https://github.com/virgiliojr94/book-to-skill) 的最新 README 安装命令并自动安装；失败则降级 `npx --yes skills add virgiliojr94/book-to-skill`，再失败则 `gFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/patent-application/tools/stdio_utf8.py:39 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/cad_venv.py:113 · Python subprocess execution detectedout = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/stdio_utf8.py:39 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/cad_venv.py:144 · Python subprocess execution detectedout = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-oa/tools/book_to_skill_setup.py:89 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-oa/tools/book_to_skill_setup.py:96 · Python subprocess execution detectedreturn subprocess.run(cmd, text=True, capture_output=True, timeout=timeout)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/run_step_to_views.py:53 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Hidden zero-width characters detectedskills/patent-reader/tools/vault/__init__.py:1 · Hidden zero-width characters detected — may conceal content# patent_reader.vaultFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Python subprocess execution detectedskills/patent-disclosure/tools/step_to_views.py:227 · Python subprocess execution detectedproc = subprocess.run(cmd, capture_output=True, text=True, timeout=180)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Hidden zero-width characters detectedskills/patent-reader/tests/__init__.py:1 · Hidden zero-width characters detected — may conceal contentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Python subprocess execution detectedskills/patent-reader/tools/stdio_utf8.py:39 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-reader/tests/test_patent_reader_pipeline.py:20 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/patent-oa/tools/book_to_skill_setup.py:106 · npx invocation of non-well-known package — may execute untrusted codeif npx and "npx" in cmd.split()[0]:Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/patent-oa/tools/stdio_utf8.py:39 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/patent-oa/tools/book_to_skill_setup.py:82 · npx invocation of non-well-known package — may execute untrusted codeif " --yes " not in f" {cmd} " and cmd.startswith("npx "):Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/patent-reader/tools/vault/obsidian.py:2231 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedskills/patent-reader/tools/vault/check_obsidian_env.py:84 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/patent-oa/tools/book_to_skill_setup.py:83 · npx invocation of non-well-known package — may execute untrusted codecmd = "npx --yes " + cmd[4:]Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedskills/patent-search/tools/stdio_utf8.py:39 · Python subprocess execution detectedreturn subprocess.run(cmd, **kwargs)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionskills/patent-reader/tools/analyze/lint_patent_note.py:8 · File type combined with upload action — agent may exfiltrate local data files[--figures-manifest figures/manifest.json] [--output lint.json]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedskills/patent-reader/tests/test_extract_patent_text.py:31 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packageskills/patent-oa/tools/book_to_skill_setup.py:105 · npx invocation of non-well-known package — may execute untrusted codenpx = _npx_cmd()Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/patent-oa/tools/book_to_skill_setup.py:18 · npx invocation of non-well-known package — may execute untrusted codeFALLBACK_NPX = f"npx --yes skills add {GITHUB_REPO}"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈2,983 tok
8 files · 353 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

1 point to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim handsomestwei: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  3. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  4. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  5. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim handsomestweiPropose a patch to the maintainer