ui-ux-dev-tool-free@1.0.1
VERIFIEDPublisher claims: "面向个人开发者的自然语言驱动React页面生成工具,通过CDN方式零构建运行, 内置截图视觉审查循环,支持快速原型迭代。核心能力: - 自然语言描述生成React页面(CDN零构建) - 项目配置与偏好管理 - 截图视觉审查与迭代修复 - 基础设计原则自动应用 - 图片转WebP格式优化 - 静态文件导出 适用场景: - 个人开发者快速生成落地页原型 - 独立项目单页面快速开发 - 设计概念验证与视觉迭代 差异化:免费版聚焦单页面快速生成与视觉审查,使用CDN方式零构建, 适合个人快速原型" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Privileged sudo commandSKILL.md:456 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05No other findings across 531 lines in 2 files.