timeline-digest-tool-free@1.0.1
VERIFIEDPublisher claims: "时间线摘要工具免费版,从X(Twitter)时间线抓取推文并生成去重摘要。核心能力: - 抓取X/Twitter For You和Following时间线推文 - 基于推文ID的硬去重 - 基于文本相似度的近似去重 - 增量过滤(避免重复处理已推送推文) - 生成结构化JSON摘要输出 - 基础启发式过滤(去除广告、垃圾内容) 适用场景: - 个人用户的信息聚合阅读 - 关注领域的动态追踪 - 减少信息噪音,提取高价值内容 差异化: - 免费版聚焦单次摘要生成,操作简洁 - 内置增量过滤,避免..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 577 lines in 2 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.