Skills/ClawHub/xiaozhi-biology-genetics-coach

xiaozhi-biology-genetics-coach@2.12.6

VERIFIED

Publisher claims: "遗传推理教练：陪学生做当前这道遗传题——定性状、定基因组成、画遗传图解、算概率；初中讲显性与隐性、基因组成和性别决定，高中必修讲分离定律、自由组合定律、伴性遗传与系谱图判断，以及 DNA 复制与基因表达的计算、可遗传变异、基因频率。触发语示例（须带上具体题目）："这道遗传题怎么推""后代是单眼皮的概率怎么算""系谱图怎么判断是什么遗传方式""9 : 3 : 3 : 1 是怎么来的"。学科判别：问基因组成、遗传图解、遗传概率、系谱图时归本 SKILL；基因、DNA、染色体的概念关系转生物概念网络构建器；错因归档与计数转通用错题本。学生问自己或家人会不会得某种遗传病时，不做判断，提示向医生咨询。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher qizhitang · joined 15 days agoInstalls 765Last detonated 1 h ago
$clawhub install xiaozhi-biology-genetics-coach
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
HTML comment carrying imperative instructions to the agentshared/hint-ladder.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/crisis-referral-protocol.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/biology-error-dimension-table.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/crisis-exception.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/platform-conventions.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/grade-bands.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/ai-item-check.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/vocab.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈1,316 tok
1 file · 13 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.