Skills/ClawHub/xiaozhi-biology-concept-network

xiaozhi-biology-concept-network@2.12.6

VERIFIED

Publisher claims: "生物概念网络构建器：帮学生把零散的生物概念连成网——按"大概念 → 重要概念 → 次位概念"分层，用结构与功能、物质与能量等生命观念串起来，理清基因与染色体、光合作用与呼吸作用这类最易混的概念关系；高中覆盖必修与选择性必修的概念层级（选择性必修只对选考生物的学生）。触发语示例："基因、DNA、染色体到底什么关系""光合作用和呼吸作用怎么区分""帮我把这一章的概念串起来""生物全是要背的，怎么记得住"。学科判别：问生物概念之间的关系、要画概念图或整理一章的知识结构时归本 SKILL；带具体数据要算的遗传题转遗传推理教练；曲线和示意图怎么读转生物图表与材料题教练；实验怎么设计转生物实验探究教练。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher qizhitang · joined 15 days agoInstalls 859Last detonated 1 h ago
$clawhub install xiaozhi-biology-concept-network
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
HTML comment carrying imperative instructions to the agentshared/vocab.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/biology-error-dimension-table.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/hint-ladder.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/crisis-referral-protocol.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/platform-conventions.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/ai-item-check.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/crisis-exception.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/grade-bands.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈1,383 tok
1 file · 14 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

xiaozhi-biology-concept-network@2.12.6 safety verdict: Verified 87/100 — KillerSkills