smyx-poop-clean-trigger-analysis@1.0.15
VERIFIED· install onlyPublisher claims: "Triggers when a user provides a dog toilet / pet defecation-zone video URL or file for analysis; uses a fixed camera on the dog toilet or designated defecation area to monitor video in real time, detects whether the pet is defecating (presence of feces) and, once the pet leaves the area, automatically outputs a cleaning trigger signal that can drive a robot vacuum to that spot for cleanup. Enables fully automated pet-waste handling, reduces owner workload, and keeps the home hygienic. Application: indoor dog toilets, balcony defecation zones, pet kennels. Does NOT provide medical diagnosis — only outputs vision-based event detection results. | 当用户提供狗厕所或宠物固定排便区域视频URL或文件时，触发本技能进行排便事件检测分析；通过安装在狗厕所或宠物固定排便区域的摄像头实时分析视频，识别宠物是否在该区域排便（粪便出现），并在宠物离开该区域后自动输出清扫触发信号，联动扫地机器人前往清理；实现宠物排泄物的即时自动化处理，减轻主人清理负担，保持居家环境卫生。应用场景：宠物家庭室内狗厕所、阳台排便区、宠物笼舍。仅输出基于视觉的事件检测结果，不进行医疗诊断。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 91/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
# result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.base-url-health: "http://192.168.1.234:7070/jeecg-boot-xzgz"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.base-url-open-h5: "http://192.168.1.234:4100"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.base-url-open-api: "http://192.168.1.234:9601/smyx-open-api"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.