Skills/ClawHub/storyforge-writing

storyforge-writing@0.5.0

VERIFIED

Publisher claims: "StoryForge 叙事写作框架（蒸馏自 github.com/yuanbw2025/storyforge 的数据契约 + 写作 SOP）。 用于按 StoryForge 字段闭集生成「框架语料」并受控推进创作：长篇/短篇/小说转剧本/世界引擎封存与出口/ 角色卡/AVG·文字冒险·跑团（A 类）、漫画分镜·漫剧素材前期（B 类）、漫剧后期对接（C 类）。 触发：用户说"按 StoryForge/故事熔炉框架写""生成框架语料""按写作 SOP 推进""对齐 StoryForge 数据契约"， 或要做「小说转剧本」「世界封存/出口包」「分镜/漫剧 prompt 包」等结构化创作。 不用于：纯自由写作/润色（无结构化产物需求）、操作 StoryForge 应用本身。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher taosiuman · joined 12 days agoInstalls 446Last detonated 3 h ago
$clawhub install storyforge-writing
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-03 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedscripts/check_consistency.py:510 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/run_tests.py:48 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/run_tests.py:37 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/run_tests.py:277 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05