Skills/ClawHub/sz-html

sz-html@0.1.0

VERIFIED

Publisher claims: "HTML 演示文稿生成助手（本地资产直读，开箱即用）。基于 49 种常见前端页面风格（瑞士极简/磨砂玻璃/赛博朋克/复古胶片/粗野主义/便当拼盒等）提炼的结构化风格资产，PPT 式流程：①内容采集→大纲生成（先出章节结构+页数规划让用户确认）；②按大纲智能选型（风格+页面数量双定，多风格匹配让用户选）；③逐页生成 HTML 演示文稿（封面/目录/内容/数据/结尾页，左右翻页+底部页码总数与进度条+圆点跳页）；④按风格注入完整 CSS 设计 token；⑤质量审核（风格还原度/排版/响应式/可访问性）；⑥修订模式（改某页不重走选型）。适用：HTML 演示文稿、网页汇报页、产品提案页、数据展示页、品牌展示页。不适用：Word/PPT 原生文件、微信小程序、需后端服务的完整应用。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher songzhou666 · joined 5 days agoInstalls 87Last detonated 5d ago
$clawhub install sz-html
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Access to sensitive file pathsbuild.py:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

No other findings across 6,975 lines in 76 files.