Skills/ClawHub/siluzan-cso

siluzan-cso@1.1.45

CAUTION· install only

Publisher claims: "丝路赞内容运营平台（CSO）。**凡涉及以下任一类业务，必须先加载并使用本 skill**。 (1) **文案生成与改稿**：选题、爆款拆解、新写成稿（公众号、小红书、**视频口播/字幕/配音/分镜脚本**、博客、改稿润色、评论区回复等）须走 `three-lib-content-workflow/content-writer.workflow.md`；**热点/资讯生成选题**见 `topic-selection.md`；**单轨 / 多轨**（多轨默认 2 篇、可增减，可主动推断）见 `multi-track.md`；**禁止**直接成稿或聊天润色。 **视频脚本 vs 发布 Caption**：口播/字幕/分镜走 content-writer；上传发布框 Caption 走 `overseas-b2b-social-post`。 (2) **人设管理**：运营账号人设卡（styleGuide）；反推/查询/保存。 (3) **发布与运营**（YouTube/TikTok/Instagram/LinkedIn/X/Facebook）：OAuth、**账号分组**、发布、任务/重试、upload、**extract-cover**、planning、报表。 (4) **RAG 知识库**：品牌/产品问答与写稿事实依据。 **海外 B2B 社媒贴文/Caption**：走独立 skill `overseas-b2b-social-post`，不在本 skill 文案流程内。 **高频误路由**：写文案禁联网代替 rag query；发布/截封面须调 CLI。 **账号不明先问**：仅运营媒体账号；广告账户走 siluzan-tso。" Observed in sandbox: reads credential files.

Registry ClawHubPublisher sigedev01-bit · publishing for 67 daysInstalls 2,775Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-07 and scored it 67/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Pipe-to-shell pattern; Privileged sudo command. Summary: reads credential files.

Behavior trace

Honeypot run · 19 s · 2 scenarios
t+CategoryObserved action
10sfilesystemread ~/work/acme-api/.npmrc · ~/.npmrc · ~/.local/share/pnpm/.npmrc
10sfilesystemread ~/.npm/_logs · ~/work/.corepack.env · ~/work/package.json · ~/.corepack.env · ~/package.json · ~/.cache/node/corepack/lastKnownGood.json outside project
10sfilesystemwrote ~/.npmrc · ~/.cache/node/corepack/lastKnownGood.json · ~/.cache/node/corepack/v1/corepack-359-c31def0.ec286/dist/node_modules/undici/lib/llhttp/.gitkeep · ~/.cache/node/corepack/v1/corepack-359-c31def0.ec286/dist/node_modules/.bin/get-pnpm · ~/.cache/node/corepack/v1/corepack-359-c31def0.ec286/dist/node_modules/node-gyp/gyp/gyp · ~/.cache/node/corepack/v1/corepack-359-c31def0.ec286/dist/node_modules/@isaacs/fs-minipass/LICENSE
10sprocessexec /usr/bin/tr
10sprocessexec /usr/bin/cut
10sprocessexec /usr/local/bin/npm
10sprocessexec /usr/local/bin/pnpm
10sprocessexec /tmp/ks-detonate-zfYvE9/setup/home/.cache/node/corepack/v1/pnpm/12.18.0/pnpm-native
10sprocessexited 1: help: Run "pnpm setup" to update your shell configuration.
10sprocessscript backend runs setup only
10sprocessscript backend runs setup only
18sprocesssecond launch, clock +45 days, CI unset
19sfilesystemread ~/work/acme-api/.npmrc · ~/.npmrc · ~/.local/share/pnpm/.npmrc
19sfilesystemread ~/.npm/_logs · ~/work/.corepack.env · ~/work/package.json · ~/.corepack.env · ~/package.json · ~/.cache/node/corepack/lastKnownGood.json outside project
19sfilesystemwrote ~/.npm/_update-notifier-last-checked · ~/.local/share/pnpm/_tmp_548_12f34a70
19snetworkCONNECT https://registry.npmmirror.com · undeclared
19sprocessexec /usr/bin/faketime
19sprocessexec /usr/bin/tr
19sprocessexec /usr/bin/cut
19sprocessexec /usr/local/bin/npm
19sprocessexec /usr/local/bin/pnpm
19sprocessexec /tmp/ks-detonate-zfYvE9/later/home/.cache/node/corepack/v1/pnpm/12.18.0/pnpm-native
19sprocessexited 1: help: Run "pnpm setup" to update your shell configuration.

Static findings

CRITICAL
Pipe-to-shell patternscripts/install.sh:75 · Pipe-to-shell pattern — downloads and immediately executes remote codecurl -fsSL https://install-node.vercel.app/lts | bash -s -- --yesFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
CRITICAL
Pipe-to-shell patternscripts/install.sh:61 · Pipe-to-shell pattern — downloads and immediately executes remote codecurl -fsSL https://install-node.vercel.app/lts | bash -s -- --yesFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Privileged sudo commandscripts/install.sh:67 · Privileged sudo command — agent may execute with elevated privilegescurl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Remote installer piped to shellscripts/install.sh:61 · Remote installer piped to shellcurl -fsSL https://install-node.vercel.app/lts | bash -s -- --yesFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
HIGH
Privileged sudo commandscripts/install.sh:71 · Privileged sudo command — agent may execute with elevated privilegescurl -fsSL https://rpm.nodesource.com/setup_22.x | sudo -E bash -Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install.sh:68 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get install -y nodejsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install.sh:72 · Privileged sudo command — agent may execute with elevated privilegessudo yum install -y nodejsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Remote installer piped to shellscripts/install.sh:75 · Remote installer piped to shellcurl -fsSL https://install-node.vercel.app/lts | bash -s -- --yesFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07

Cost to the agent

Instructions loaded
≈4,732 tok
1 file · 41 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

13 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Reads credential files≈ +27 on the totalThe sandbox saw reads under ~/.ssh, ~/.aws, ~/.npmrc, ~/.config or similar. Read only files inside the project, and only the ones the task needs. Seen: ~/work/acme-api/.npmrc, ~/.npmrc, ~/.local/share/pnpm/.npmrc.
  2. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  3. Unclaimed publisher≈ +8 on the totalClaim sigedev01-bit: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  4. Touches files outside the project≈ +7 on the totalKeep reads and writes inside the working directory, or declare the exact paths in `filesystem:` and explain why in the README.
  5. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  6. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim sigedev01-bitPropose a patch to the maintainer