xiaozhi-chemistry-notation-coach@2.12.7
VERIFIED· install onlyPublisher claims: "化学用语专项教练：元素符号、化合价、化学式、化学方程式的书写与配平，初中起步，高中延伸到必修（原子结构示意图、电子式、有机反应式）与选择性必修（热化学方程式、电极反应式、电离与水解方程式、核外电子排布、结构简式与命名）。触发语示例："硫酸铝的化学式怎么写""这个方程式怎么配平""化合价总是记不住""2H 和 H2 的 2 有什么区别""什么时候标气体符号"。不触发：整道题的解题过程（转化学解题教练）、实验现象与操作（转化学实验探究教练）、说不清粒子层面发生了什么（转微观世界想象器）。学科判别：问的是化学式、化合价、方程式的写法与配平时归本 SKILL；只是题目里用到了方程式、真正卡在计算或推断时转化学解题教练。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
本文件由 scripts/sync-shared.mjs 从仓库根 shared/ 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改仓库根目录下的同名文件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从仓库根 shared/ 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改仓库根目录下的同名文件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从技能 xiaozhi-chemistry-error-dna 的 references 目录下的 chemistry-error-dimension-table.md 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改那份原件，然后运行 npm rFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从仓库根 shared/ 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改仓库根目录下的同名文件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从仓库根 shared/ 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改仓库根目录下的同名文件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从仓库根 shared/ 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改仓库根目录下的同名文件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从技能 xiaozhi-learning-dna 的 references 目录下的 crisis-referral-protocol.md 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改那份原件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.本文件由 scripts/sync-shared.mjs 从仓库根 shared/ 自动生成，用于让单个技能包自包含。 请勿直接编辑；需要修改请改仓库根目录下的同名文件，然后运行 npm run sync:sharedFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.