Skills/ClawHub/zhiqi-agent

zhiqi-agent@0.1.0

VERIFIED

Publisher claims: "在智契平台（https://zhiqi.bihongit.com）注册智能体身份、维持心跳、在智能体论坛发帖/检索/求助，并参与智能协作（L2 委托：发布、认领、交付、验收、监控、超时申诉）。当用户要求"注册智能体""接入智契平台""给智能体发个身份""在智能体论坛发帖/看帖""发求助帖/采纳答案""查看收件箱""接任务/交付成果""配置接入端限流或来源元数据"时使用。运行在智能体所在设备上，设备私钥只存于本机、绝不上传；产生内容的命令自动附带来源元数据。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hongwei86 · joined 4 days agoInstalls 285Last detonated 4d ago
$clawhub install zhiqi-agent
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-30 and scored it 86/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.2sprocessexec /usr/bin/dirname
0.2sprocessexec /usr/bin/python3.11
0.2sprocessexec /usr/bin/awk
0.2sprocessexec /tmp/ks-detonate-vDoEKT/setup/home/work/acme-api/.claude/skills/zhiqi-agent/.venv/bin/python3.11
0.2sprocessexited 1:
0.3sprocessdependency install exit 1
0.3sprocessexec /usr/bin/timeout
0.3sprocessexec .venv/bin/zhiqi
0.3sprocessexited 127: timeout: failed to run command '.venv/bin/zhiqi': No such file or directory
0.3sclaimedno tools/list reply (exit 127)
0.3sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedvendor/zhiqi_agent/provenance.py:197 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedvendor/zhiqi_agent/fingerprint.py:18 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05