wechat-topic-radar@1.4.1
VERIFIEDPublisher claims: "公众号选题雷达。支持三种入口:① 种子关键词扩散;② 微信搜一搜实时热搜榜转译;③ 对标公众号历史文章聚类。抓取公开数据后,用本地启发式模型计算「需求热度 / 竞争度 / 机会分」,输出机会矩阵、蓝海选题清单、账号内容版图与内容缺口。当用户提到不知道写什么、找选题、蓝海词、长尾词、内容机会、选题调研、竞品选题分析、公众号选题、追热点选题、对标账号、内容审计等场景时触发。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
File type combined with upload actionSKILL.md:345 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07MEDIUM
File type combined with upload actionSKILL.md:280 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07MEDIUM
File type combined with upload actionSKILL.md:341 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07