work2cli-hitl@0.1.1
VERIFIEDPublisher claims: "指导把日常工作沉淀成 CLI 工具集 + agent skill 的工作台,并对写操作接入飞书审批形成极简 HITL(Human-In-The-Loop)。用户只需给一个网站/系统地址,agent 自主勘察 API 面貌、识别哪些功能是写、自行炼化成 CLI。触发条件:用户想把日常/重复工作做成命令行工具、丢来一个平台网址说「帮我把这个做成工具」、想给 CLI 的写操作加审批/二次确认、提到 write-guard/写守卫/HITL/Human-In-The-Loop/飞书审批/守卫守护进程/全局守卫、想搭「CLI + skill」工作台、做完 CLI 要求沉淀使用说明/更新注册表/自进化。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Fake instruction boundary tagregistry/_template.md:19 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagregistry/_template.md:4 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagSKILL.md:135 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagreferences/self-evolution.md:15 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagregistry/_template.md:20 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagdemo/README.md:13 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagreferences/self-evolution.md:21 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagreferences/self-evolution.md:38 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagSKILL.md:48 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagregistry/_template.md:21 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagreferences/self-evolution.md:39 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagSKILL.md:58 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagreferences/self-evolution.md:29 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagSKILL.md:49 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagSKILL.md:133 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagdemo/README.md:39 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01