Skills/ClawHub/xinchuang-it-procurement-analyzer

xinchuang-it-procurement-analyzer@1.0.9

VERIFIED

Publisher claims: "信创与 IT 信息化采招数据分析助手。当用户涉及以下任何场景时，必须使用此SKILL：搜索信创/国产化/IT信息化招标中标公告（服务器、数据库、操作系统、云、数据中心、网络安全、软件等）、查询某IT品牌/型号的中标占有率与历史单价、分析IT集成商的主营业务与竞争对手、查询某品类的Top采购单位/Top中标单位、推荐潜在投标供应商、数字政府与信创项目趋势分析、IT采购寻源/渠道拓展等场景。即使用户没有提到「信创」，只要涉及IT、信息化、国产化、服务器、数据库、软件、云、网络安全等采购与中标需求，都应使用本SKILL。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher zhiliaobiaoxun · joined 0 days agoInstalls 1,135Last detonated 3 h ago
$clawhub install xinchuang-it-procurement-analyzer
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-28 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:19 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04

No other findings across 2,224 lines in 8 files.