Is xiaozhi-learning-plan@2.12.0 safe to install?

Skills/ClawHub/xiaozhi-learning-plan

xiaozhi-learning-plan@2.12.0

VERIFIED

Publisher claims: "把学习目标拆成可执行的 30 天方案（小学高段用周计划版），并在学生开启后跟进执行偏差。学生说"帮我制定学习计划"、"我不知道怎么安排时间"、"下次考试前怎么复习"、"帮我生成30天方案"、"我的计划总是坚持不下去"、"帮我做家庭学习看板"时可激活。它只管"什么时候做什么"：直接用错题本给出的弱项摘要来排任务，自己不做错因归类与深度归因（转错题本）；不讲题（转对应学科教练）、不发提醒（转 IM 智能提醒）。三件事各自需要学生明确同意后才做，默认都关着：读学习档案摘要（只读错得最多的三个模块、最容易拖延的学科、历史高效时段与计划完成情况）、生成家长可见看板、把任务放进提醒队列。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher qizhitang · joined 5 days agoInstalls 1,898Last detonated 2 h ago

$clawhub install xiaozhi-learning-plan

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

HTML comment carrying imperative instructions to the agentshared/crisis-exception.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentshared/ai-item-check.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentshared/hint-ladder.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentshared/platform-conventions.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentshared/crisis-referral-protocol.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentshared/vocab.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentshared/grade-bands.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01