Skills/ClawHub/rent-deposit-refund-check-free

rent-deposit-refund-check-free@1.0.5

VERIFIED

Publisher claims: "押金保证金台账与退还明细表逐项核对。应退金额复算（应退金额 = 收取金额 − 扣除金额）、扣除金额带依据与上限（扣除依据为空或没写明事由、扣除金额超过收取金额）、退还时间超过约定期限提示（应退截止日 = 收取日期 + 约定退还期限，含已过截止日仍未退清）、同一合同同一押金类型重复退还、台账余额勾稽（台账余额 = 收取金额 − 退还金额 − 已结转金额）、关键字段缺失或为负。每条结论都引用原文行号，材料不足时不给结论。触发词包括 押金保证金收取与退还核对、押金保证金台账与退还明细表对不上、押金该退多少对不上、退押金超期、台账余额对不上。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher chenqg618 · joined 7 days agoInstalls 313Last detonated 2 h ago
$clawhub install rent-deposit-refund-check-free
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 86/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Hidden zero-width characters detectedscripts/engine/rent-deposit-refund-check.js:34 · Hidden zero-width characters detected — may conceal contentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07

No other findings across 1,017 lines in 5 files.

Cost to the agent

Instructions loaded
≈1,427 tok
1 file · 5 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.