risk-assessment-antipattern@1.0.0
VERIFIEDPublisher claims: "对 RWA/Web3 项目做产业/产品/合规三层体检,并嵌入三大爆雷反例(伪 RWA、责任真空、慢资产快金融)作边界警示。 当用户在立项前、投资前或审计一个"上链/通证化/RWA"项目时激活:①想识别"伪 RWA""慢资产快金融""责任真空"等结构性风险;②面对"高收益稳定、上链即安全""回款慢却承诺 T+0 流动性"等话术;③尽调资产自偿性、SPV 破产隔离、预言机责任边界是否到位。 不适用于:纯境内概念澄清(转 S1)、纯合规生死判读(转 S2)、纯 RWA 落地路径设计(转 S8)。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
Process kill commandSKILL.md:107 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05No other findings across 357 lines in 4 files.