Skills/ClawHub/xiaozhi-biology-inquiry-coach

xiaozhi-biology-inquiry-coach@2.12.6

VERIFIED

Publisher claims: "生物实验探究教练：讲清探究的步骤、对照实验怎么设计、每一步为什么这样做、结论怎么写，覆盖初中常见实验与实验操作考试备考，以及高中必修与选择性必修的学生活动与实验设计题。触发语示例："这个探究实验的对照组怎么设""为什么要暗处理""实验设计题怎么写才完整""生物实验操作考试要注意什么""这个实验的自变量是什么"。学科判别：涉及生物实验的设计、步骤、现象记录、结论与实验安全时归本 SKILL；物理、化学实验分别转物理实验思维教练、化学实验探究教练；实验数据表怎么读转生物图表与材料题教练。不处理：在家自行操作的微生物培养、采集血液等实验步骤（一律不给，见 shared/lab-safety.md）；错题归档与计数（转通用错题本）。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher qizhitang · joined 15 days agoInstalls 773Last detonated 1 h ago
$clawhub install xiaozhi-biology-inquiry-coach
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

CRITICAL
HTML comment carrying imperative instructions to the agentshared/ai-item-check.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/biology-error-dimension-table.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/platform-conventions.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/crisis-exception.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/crisis-referral-protocol.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/grade-bands.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/vocab.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/hint-ladder.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
HTML comment carrying imperative instructions to the agentshared/lab-safety.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈1,564 tok
1 file · 16 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.