Skills/ClawHub/xinling-bushou-v2

xinling-bushou-v2@4.0.0

VERIFIED

Publisher claims: "心灵补手 V4.0 - explicit, session-scoped companion personas" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher william22820785-cmyk · joined 3 days agoInstalls 1,290Last detonated 1 h ago
$clawhub install xinling-bushou-v2
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-05 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios
t+CategoryObserved action
0.4sfilesystemread ~/.xinling-bushou-v2/core/ · ~/.xinling-bushou-v2/adapters/ · ~/.xinling-bushou-v2/schemas/ · ~/.xinling-bushou-v2/personas/ · ~/.xinling-bushou-v2/bin/xinling · ~/.xinling-bushou-v2 outside project
0.4sfilesystemwrote ~/.xinling-bushou-v2/bin/xinling · ~/.xinling-bushou-v2/core/__pycache__/__init__.cpython-311.pyc.140248210243232 · ~/.xinling-bushou-v2/core/__pycache__/persona_engine.cpython-311.pyc.140248207532528 · ~/.xinling-bushou-v2/schemas/__pycache__/__init__.cpython-311.pyc.140248206662096 · ~/.xinling-bushou-v2/schemas/__pycache__/launch_config.cpython-311.pyc.140248206662896 · ~/.xinling-bushou-v2/core/__pycache__/persona_registry.cpython-311.pyc.140248206662096
0.4sprocessexec /usr/bin/dirname
0.4sprocessexec /usr/bin/mkdir
0.4sprocessexec /usr/bin/cp
0.4sprocessexec /usr/bin/chmod
0.4sprocessscript backend runs setup only
0.4sprocessscript backend runs setup only

Static findings

MEDIUM
URL with suspicious TLDSKILL.md:5 · URL with suspicious TLD — commonly used for phishing/malwareFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File permission modification commandscripts/install.sh:23 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05