Skills/ClawHub/smart-transit-rail-bid-analyzer

smart-transit-rail-bid-analyzer@1.0.9

VERIFIED

Publisher claims: "智慧交通与轨道交通采招数据分析助手。当用户涉及以下任何场景时，必须使用此SKILL：搜索轨道交通/智慧交通/公路/ETC/信号系统/交通机电等招标中标公告、查询大型交通基建工程项目、分析交通设备品牌的中标占有率与历史单价、查询某交通项目的潜在投标单位、分析施工/集成单位的主营业务与竞争对手、查询某品类Top采购单位/Top中标单位、交通行业市场趋势分析、采购寻源/渠道拓展等场景。即使用户没有提到「交通」，只要涉及轨交、地铁、公路、ETC、信号、交通设备等采购与中标需求，都应使用本SKILL。首次使用无需手动注册：经用户同意后可自动开通免费试用账号（送100次调用，仅采集3项非身份设备特征做设备去重，隐私说明见包内文档），用户拒绝则提供手动注册链接。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhiliaobiaoxun · joined 0 days agoInstalls 1,179Last detonated 3 h ago
$clawhub install smart-transit-rail-bid-analyzer
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:19 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 2,222 lines in 8 files.

smart-transit-rail-bid-analyzer@1.0.9 safety verdict: Verified 91/100 — KillerSkills