pharmacology-pmph-10edition@1.0.0
CAUTION· static onlyPublisher claims: "基于人民卫生出版社《药理学》第10版的临床药学技能手册 — 180 项核心药理学技能" Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-13 and scored it 71/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Latin word with Cyrillic or Greek look-alike letters (homoglyph); Latin word with Cyrillic or Greek look-alike letters (homoglyph); Latin word with Cyrillic or Greek look-alike letters (homoglyph). Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
μmolFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…| 当用户需要根据特定页码（467–469）和药物名称判断药物类别，适用于处理结核预防、肿瘤免疫治疗或免疫低下状态时 | | [yi-ni-xing-kang-dan-jian-zhi-mei-yao-zuo-yong-ji-zhi](yi-ni-xing-kang-dan-jian-zhi-mei-yao-zuo-yong…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.| [shu-geli-dan-kang-shi-yong-zhi-nan](shu-geli-dan-kang-shi-yong-zhi-nan/SKILL.md) | 判断是否适用舒格利单抗及其给药方案（单药或联合化疗） | 适用于转移性非鳞状/鳞状NSCLC、不可切除Ⅲ期NSCLC、R/R ENKTL或ESCC的特定临床场景 |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.DβHFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.PLCγFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.- shu-geli-dan-kang-shi-yong-zhi-nanFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
9 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim xllgreen: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.