typhoon-tracker@1.2.0
VERIFIED· install onlyPublisher claims: "台风实时追踪与影响研判（Typhoon Tracker），经多台风全周期实战验证。当用户询问台风路径/登陆预测/强度、风雨影响、出行安全、交通停运、活动/演唱会/漫展可行性时加载；当用户询问航班/高铁/交通出行与行程规划时**必须加载**——即使未明确提及台风，也要排查台风及其残余环流、冷空气等系统性天气背景对交通的影响（避免仅看当日天气导致误判，如残涡'回马枪'）；当询问停编台风的残涡去向/残余影响/降雨成因时**必须加载**（残涡可停编后重组二次增强）；当近海存在未编号扰动/热带低压/弱台风逼近重点城市时**必须加载**（距重点城市<500km 的系统优先级≥远洋强台风）。覆盖数据源体系与冲突仲裁、预测变化规律、影响/降雨/交通评估模型、三模式自动切换（台风/残涡/空窗期）、报告与PDF生成、决策框架。核心优势：真实台风实测反推规律（巴威/白海豚/浪卡/简拉维/沙德尔等）、交通停运[官方]与[预测]严格分级、残涡与近海系统动态跟踪、持续迭代越用越准。适用于西北太平洋台风逼近华东沿海及残涡滞留/重组/出境、近海弱系统快速升级的完整生命周期场景。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 6,112 lines in 26 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.