yotta-prompt@0.2.5
VERIFIEDPublisher claims: "元引 —— 意图澄清 + 生态入口技能：用户输入一句模糊的话 / 一个词时，识别意图、给出 2-4 个候选方向、深挖（目标/范围/输出/约束），再串联到对应元阁技能输出可直接运行的提示词。常驻注入（always-load）：每次新会话开始自动生效，接住「不会用 AI、不知道怎么提问」的用户。触发：用户不知道怎么提问、不知道想要什么、输入模糊的一句话 / 一个词、想被引导到合适技能时。边界：只澄清意图、不预设立场、不做安全评审；提示词不人为设限（不违规/不犯法/不越狱即可）；不做 prompt 美化；纯本地离线。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-02 and scored it 85/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.1sprocessexec /usr/bin/dirname
0.1sprocessexec /usr/bin/uname
0.1sprocessexited 4: 目标错误: 未检测到项目级智能体目录。可用 --agent <name> 装到用户级，或用 --dir <路径> 指定目录。
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
Static findings
CRITICAL
Prompt injectionpackage.json:4 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01MEDIUM
npx invocation of non-well-known packageSKILL.md:125 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packagebin/install.js:9 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packagebin/install.js:6 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packageSKILL.md:114 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packagebin/install.js:10 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packagebin/install.js:8 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packagescripts/yotta_prompt.py:371 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06MEDIUM
npx invocation of non-well-known packagebin/install.js:7 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06