Skills/npm/paper-format

paper-format@1.0.0

VERIFIED

Publisher claims: "按论文类型规范化中文或英文论文，接受 Word（.doc/.docx）及 LaTeX（单个 .tex 或可验证的工程 .zip）源文件；PDF、图片及其他格式不进入排版流程。区分毕业/学位论文、学术/期刊论文、课程论文及其他稿件，处理摘要、目录、页眉页脚、图表、公式及参考文献；学校或期刊模板优先。Use when the user asks to format a paper supplied as Word or LaTeX source, including a validated LaTeX pro" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher cryptocxf · joined 7 days agoInstalls 336Last detonated 7d ago
$claude mcp add paper-format -- npx -y paper-format
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedscripts/validate_graduation_docx.py:120 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

No other findings across 1,978 lines in 24 files.