Ai Workflow Red Team Lite

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI05: Unexpected Code Execution

What this means

If used, the helper can read the input file you provide and create a report file at the output path you choose.

Why it was flagged

The skill may invoke a bundled local Python helper and write an output file. This is clearly disclosed and aligned with generating structured red-team review reports, but it is still local code execution.

Skill content

如运行环境允许 shell / exec，可使用：
   - `python3 "{baseDir}/scripts/run.py" --input <输入文件> --output <输出文件>`

Recommendation

Run it only on intended files, choose a safe output location, and use the documented dry-run or stdout behavior if you do not want a file written.