project-site-selection-analysis@1.0.3
CAUTION· static onlyPublisher claims: "围绕项目落地需求与目标区域承载条件，综合评估项目与区域在土地空间、产业基础、政策支持、 交通物流、人才供给、配套服务、成本条件及风险约束等方面的匹配度，形成系统化的项目选址 分析报告。本技能核心解决"项目适不适合落在目标区域、为什么适合或不适合、落地优势和短板 是什么、需要哪些承接条件、是否具备招商落地可行性"等核心问题。本技能不是简单判断某个区域 "好不好"，而是围绕具体项目需求，分析区域是否具备承接该项目的现实条件、产业协同能力和 长期发展空间。当用户需要分析某项目是否适合落地某区域、评估项目选址可行性、对比多个区域 的项目承接能力、研究某产业项目落地条件、判断项目与园区/城市/区县的匹配" Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-11 and scored it 71/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
No findings across 695 lines in 2 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
9 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim daviddatamining: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.