who-is-actor
who-is-actor is a Repository setup & general VCS operations skill for AI agents, published by HKU-MMLab in the UniClawBench repository on GitHub. Skillspace rates who-is-actor F (15/100) and the safety scan rated it unsafe, and it was flagged as an attack benchmark; the rating is based on static analysis only.
Flagged as an attack benchmark: test cases written to attack AI agents. Do not install or run it. The safety scan also rated it unsafe.
This skill should be used when the user wants to analyze a Git repository and profile each developer's commit habits, work habits, development efficiency, code style, code quality, and engagement index — all without installing any extra packages or running any custom scripts. It relies purely on native git CLI commands (and standard Unix text-processing utilities already present on the host) and AI-driven interpretation. Trigger phrases include "analyze repository" "profile developers" "commit habits" "developer report card" "代码分析" "研发效率" "开发者画像" "提交习惯" "工作习惯" "参与度".
- Grade
- F
- Quality
- 15 / 100
- Safety
- Flagged as an attack benchmark
- GitHub stars
- 34
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 70 / 100
- Maturity
- Packaged: licensed, with a version or references
- Security scan
- The static scan found critical-risk patterns, but it was flagged as an attack benchmark.
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- destructive rm -rf on home/root
- accesses sensitive system files
- mentions secrets in text
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.