Skills/ClawHub/professor-wangqi

professor-wangqi@1.3.0

CAUTION· install only

Publisher claims: "王琦教授中医体质学术助手。支持五大场景：(1)学术问答：查询体质学说、九种体质、辨体论治、方药知识；(2)临床思路学习：学习王琦教授诊疗经验；(3)知识库维护：添加PDF、提取知识卡、构建索引、验证质量；(4)数据分析：Excel/病例表分析、体质分布统计；(5)理论体系梳理。知识库覆盖：九种体质（平和质、气虚质..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher jiafeng-yan · publishing for 122 daysInstalls 573Last detonated 3d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-11 and scored it 74/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Hidden zero-width characters detected; Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Hidden zero-width characters detecteddata/cards/papers/WQ-SCI-005.json:32 · Hidden zero-width characters detected — may conceal content…axis demonstrates the significance which is the value of -log (P-value). (B) Net­ work visualization of metabolic related genes and Gene Ontology (GO) terms. The…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Access to sensitive file pathsscripts/build_vector_index.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 从.env读取配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/build_vector_index.py:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesmodel: 嵌入模型名称（从.env读取）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/build_local_index.py:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprint(f" 3. EMBEDDING_API_KEY and EMBEDDING_BASE_URL are correctly set in .env")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/build_local_index.py:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 加载.env配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ask.py:96 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesf" 3. Check EMBEDDING_BASE_URL and EMBEDDING_API_KEY in .env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/build_vector_index.py:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 从.env读取配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `../.env` - Environment configuration (API keys, model settings)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/build_vector_index.py:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 加载.env配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ask.py:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load .env configFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/AGENTS.md:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- Environment variables are loaded from `../../.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/build_local_index.py:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 从项目根目录的.env读取配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Hidden zero-width characters detecteddata/cards/papers/WQ-SCI-005.json:72 · Hidden zero-width characters detected — may conceal content"content": "The x-axis demonstrates the significance which is the value of -log (P-value). (B) Net­ work visualization of metabolic related genes and Gene Ontology (GO) terms",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Access to sensitive file pathsscripts/build_vector_index.py:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesapi_key: API密钥（从.env读取）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
Latin word with Cyrillic or Greek look-alike letters (homoglyph)data/cards/papers/WQ-SCI-006.json:4 · Latin word with Cyrillic or Greek look-alike letters (homoglyph) · informational: not an instruction fileRXRαFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsscripts/health_check.py:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Check .env file exists"""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/upload_to_openai.py:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesprint("ERROR: OPENAI_API_KEY not set. Please set it in .env or pass --api-key")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/upload_to_openai.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- 从项目根目录的.env读取配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathsscripts/smoke_test.py:131 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"message": ENV_WARNING or ".env not found (may rely on shell environment)",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionAGENTS.md:18 · File type combined with upload action — agent may exfiltrate local data files| `temp_pdf_text.txt` | Temporary PDF text extraction output |Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsscripts/upload_to_openai.py:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files从.env读取配置：Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
HTTP URL with a raw public IP addressscripts/extract_knowledge_cards.py:884 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot nameself.base_url = base_url or os.getenv("BASE_URL", "http://100.68.117.93:1234/v1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/runtime_paths.py:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- workspace-root .env fallback during local developmentFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/extract_knowledge_cards.py:605 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 加载.env配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
Latin word with Cyrillic or Greek look-alike letters (homoglyph)data/cards/papers/WQ-SCI-007.json:12 · Latin word with Cyrillic or Greek look-alike letters (homoglyph) · informational: not an instruction filePPARαFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsscripts/health_check.py:135 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn {"status": "fail", "message": "No .env file found", "details": details}Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/retrieve.py:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesf" 3. Check EMBEDDING_BASE_URL and EMBEDDING_API_KEY in .env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/runtime_paths.py:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesworkspace_env = WORKSPACE_DIR / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/runtime_paths.py:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn None, "workspace .env", "No .env file found"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/upload_to_openai.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 加载.env配置Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL using a raw public IP addressscripts/extract_knowledge_cards.py:884 · URL using a raw public IP address — may bypass domain-based filteringself.base_url = base_url or os.getenv("BASE_URL", "http://100.68.117.93:1234/v1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/runtime_paths.py:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn workspace_env.resolve(), "workspace .env", warningFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈6,492 tok
7 files · 84 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

6 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim jiafeng-yan: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. HTTP URL with a raw public IP address≈ +4 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
  5. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  6. URL using a raw public IP address≈ +2 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim jiafeng-yanPropose a patch to the maintainer