Skills/ClawHub/tender-bid-union-zhongzhaolianhe

tender-bid-union-zhongzhaolianhe@1.0.9

VERIFIED

Publisher claims: "招投标大数据聚合统计与趋势分析助手。当用户涉及以下任何场景时，必须使用此SKILL：招中标数据多维度聚合统计（按月/季/年/省份/城市/行业/品牌等）、同比环比趋势分析、市场规模测算、行业热度与集中度分析、查询Top采购单位/Top中标单位/Top中标品牌、品牌市场占有率、查询品牌型号历史中标单价/价格趋势、竞争格局分析、行业研究/市场分析/投资研判等场景。即使用户没有提到「中招联合」，只要涉及招投标数据统计、市场分析、行业趋势、Top排名等关键词，都应使用本SKILL。首次使用无需手动注册：经用户同意后可自动开通免费试用账号（送100次调用，仅采集3项非身份设备特征做设备去重，隐私说明见包内文档），用户拒绝则提供手动注册链接。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhiliaobiaoxun · joined 0 days agoInstalls 1,205Last detonated 4 h ago
$clawhub install tender-bid-union-zhongzhaolianhe
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:19 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 2,216 lines in 8 files.