Skills/ClawHub/patentmax-disclosure

patentmax-disclosure@1.1.0

VERIFIED

Publisher claims: "技术交底书生成。当用户要写技术交底书、专利交底、把研发材料或技术方案整理成交底书、挖专利点、只有一个想法想看看能往哪几个方向申请，或说「帮我写个交底书」「专利挖掘」「发明专利交底书」「交底书模板」「这个能写成专利吗」时使用。所用模型全部国产，国外模型 0 使用。Use when the user wants to turn R&D materials or an idea into a patent technical disclosure (invention disclosure) document (Word). All models are made in China; no foreign models are used. Requires a PatentMax API key." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ip930 · joined 12 days agoInstalls 347Last detonated 6d ago
$clawhub install patentmax-disclosure
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionscripts/patentmax_disclosure.py:364 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

No other findings across 1,487 lines in 7 files.