pre-bid-analysis-assistant@1.0.9
VERIFIEDPublisher claims: "标前分析与投标尽调助手。当用户给出一个具体的招标项目并希望在投标前做全面分析时，必须使用此SKILL：标前分析/标前尽调、项目画像拆解（预算/标的物/资质门槛/时间线）、采购方历史采购与偏好供应商分析、竞争对手预测、同类项目历史成交价参考、废标红线与限制性条款排查、投标决策建议。基于全网招中标历史数据输出标前分析报告。即使用户没有提到「标前分析」，只要涉及投标前调查、项目背景排查、该不该投等需求，都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,229 lines in 7 files.