policy-to-checklist

把征稿启事、通知、比赛规则、制度文件、招标要求等转成可执行检查清单与时间线。

Security Scan

The skill does what it says: it reads text from the macOS clipboard and helps turn notices/rules into a checklist; its requirements and code match that purpose.

Purpose & Capability

The skill's stated goal is to convert notices/rules into checklists. The only required binaries are node and pbpaste, which are appropriate for reading the macOS clipboard and processing text. No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

SKILL.md explicitly tells the agent to run scripts/read_clipboard.mjs. That script runs pbpaste (via child_process.execSync) and prints the raw clipboard contents between markers. This is coherent with the stated purpose, but reading the system clipboard can expose sensitive data — the script does not filter, redact, or prompt before printing clipboard contents.

Install Mechanism

There is no install spec and only a small included JS script; no external downloads, package installs, or archive extraction are performed.

Credentials

No environment variables, credentials, or config paths are requested. The requirement set is minimal and proportionate to the task (reading clipboard + processing text).

Persistence & Privilege

always is false and the skill does not request persistent or elevated privileges, nor does it modify other skills or system-wide configuration.

Assessment

This skill is internally consistent, but it reads your macOS clipboard and prints its raw contents. Before running it: (1) ensure you're on macOS (requires pbpaste); (2) verify clipboard contents do not contain passwords, tokens, or other secrets; (3) review scripts/read_clipboard.mjs (it is short and just calls pbpaste); (4) if you prefer safer operation, paste the text into the agent's prompt manually or modify the script to prompt for confirmation, redact sensitive fields, or read from a file. The skill itself does not transmit data externally, but the agent may include clipboard contents in model messages—treat that as a potential data exposure vector.

这是一个把复杂要求文档转成执行清单的 skill。

主要用途

适合处理：

• 征稿通知
• 投稿要求
• 比赛规则
• 申报书要求
• 制度文件
• 招标要求
• 申请表填写说明
• 项目申报通知

调用方式

当用户说：

• 读取剪贴板并整理成清单
• 把这段通知变成执行 checklist
• 帮我提取要求和截止信息
• 把投稿要求拆成步骤

你应运行：

node {baseDir}/scripts/read_clipboard.mjs