xinchuang-it-bid-decision@1.0.7
VERIFIEDPublisher claims: "信创与IT信息化投标决策分析助手。当用户给出一个具体的IT类招标项目（信创/国产化/软件开发/系统集成/云/数据中心/网络安全/智慧城市等），并希望进行投标决策分析时，必须使用此SKILL：该不该投、甲方IT采购规律与品牌倾向分析、长期合作集成商（在位者）识别、竞争对手预测、同类项目历史成交价与建议报价、技术参数倾向与废标风险评估。基于全网招中标历史数据输出决策报告。即使用户没有提到「信创」，只要涉及IT项目投标评估、信息化标该不该投、集成项目报价参考等需求，都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:21 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04No other findings across 1,233 lines in 7 files.