Skills/ClawHub/tender-opportunity-biaobiaoda

tender-opportunity-biaobiaoda@2.0.7

VERIFIED

Publisher claims: "招投标商务实战利器：自动过滤陪跑无效标、深度排查内定风险、穿透供应商关联关系，让用户快速找到适合投的标。 当用户询问“项目能不能投”、“查内定”、“是否控标”、“找商机/项目”、“查底价/报价”、“分析竞争对手”、“投标报价”，或涉及招中标搜索、标讯搜索、历史中标单价、临期商机预测时，必须触发此SKILL。 一键研判项目可行性，规避内定控标暗坑，精准挖掘高胜率采购订单。 即使用户未提及「标标达」，只要涉及防陪跑、招投标风控、采购寻源等业务痛点，均应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher liu-jiapeng · joined 0 days agoInstalls 1,516Last detonated 7 h ago
$clawhub install tender-opportunity-biaobiaoda
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:19 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 2,224 lines in 8 files.