tiantai-canon-2026@1.2.0
VERIFIED· install onlyPublisher claims: "天台藏全集2026检索与天台宗文献核验。支持简单问答和深度研究两种模式。所有论断强制标注出处（文献名/卷数/篇目）；凡可对应 CBETA 经号者附行级深链，精确到页栏行。遵循德山棒原则——不编造天台宗教义或祖师原文。当用户提问天台宗典籍、祖师著作、判教文献、止观论著、蕅益大师著作、天台藏检索等问题时使用。触发词：天台藏、天台宗文献、智者大师、蕅益大师、摩诃止观、法华玄义、法华文句、天台四教仪、教观纲宗、天台典籍等。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 153 lines in 2 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.