procurement-intent-monitor@1.0.8
VERIFIEDPublisher claims: "采购意向监控与早期商机发现助手。当用户想查询采购意向、政府采购计划或挖掘即将招标的机会时,必须使用此SKILL:采购意向查询(发标前1-3个月的公开采购计划)、按行业/地区/预算筛选、意向到发标的进展跟踪、每日/每周增量监控(商机晨报)、以及配套的拟建项目与临期续约商机扫描。给一个行业/地区即输出按价值排序的商机清单。即使用户没有提到「采购意向」,只要涉及即将招标的项目、提前对接采购人、快发标的机会等需求,都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,265 lines in 7 files.