Skills/ClawHub/visual-interactive-courseware

visual-interactive-courseware@1.2.2

VERIFIED

Publisher claims: "可视化交互课件制作技能。当用户需要为课堂教学制作可视化、可交互的课件（HTML 单文件）时使用。触发场景：把教材知识点（如血液循环、四羊方尊、晨昏线、二分二至等）做成 SVG 演示 + 可交互的网页课件、知识卡和教师说明。适用学科：生物、历史、地理、物理、化学、数学等一切含结构、流程、现象的知识点。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher erich1566 · joined 8 days agoInstalls 382Last detonated 1 h ago
$clawhub install visual-interactive-courseware
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packagescripts/bundle_3d.py:9 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedscripts/bundle_3d.py:116 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05