tender-bid-search@1.0.0
VERIFIEDPublisher claims: "招投标数据查询与商机分析：按关键词、地区、时间和金额查招标公告、中标结果、采购意向、拟建项目与临期项目，查看历史中标、采购单位和价格趋势。基于知了标讯数据，输出有来源的项目清单与筛选依据，使用平台API Key及积分。适用于查标讯与候选项目初筛；完整投标决策、企业背调、标书编写使用对应专用技能。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:28 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,776 lines in 8 files.