skill-workflow-composer@1.0.1
VERIFIEDPublisher claims: "技能工作流编排:首次使用即扫描 WorkBuddy 技能市场与本地已装技能并按逻辑分类排序展示,按用户需求组合技能为工作流(会话内加载编排/定时自动化/固化复用三层次),并主动生成跨技能组合灵感建议。触发词:技能组合、技能编排、技能工作流、技能市场、skill-composer、meta-skill-system。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
No findings across 1,709 lines in 13 files.