Skills/ClawHub/patentmax-patent-draft

patentmax-patent-draft@1.1.0

VERIFIED

Publisher claims: "专利初稿生成。当用户上传交底材料、研发报告、技术方案文档，要求写专利、写专利初稿、把材料写成专利，或说「帮我把这个写成专利」「生成专利初稿」「专利撰写」「写专利说明书」「写权利要求书」「专利申请文件」「这个项目能写几个专利」时使用；只有一个想法时也可以先出几个可申请的方向。所用模型全部国产，国外模型 0 使用。Use when the user wants a first patent draft, patent specification or claims (Word) from R&D materials, a technical write-up, or just an idea. All models are made in China; no foreign models are used. Requires a PatentMax API key." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ip930 · joined 11 days agoInstalls 362Last detonated 5d ago
$clawhub install patentmax-patent-draft
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionscripts/patentmax_disclosure.py:364 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

No other findings across 1,512 lines in 7 files.

patentmax-patent-draft@1.1.0 safety verdict: Verified 88/100 — KillerSkills