Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Markdown guide for creating and publishing ClawHub skills, with no executable code or sensitive access.
Before installing, confirm that a Chinese-language ClawHub skill-creation guide and its broad trigger phrases fit your workspace conventions. It does not appear to request sensitive access or run code.
The listed trigger phrases "创建技能 / 技能模板 / 发布技能" are short natural-language phrases without scope constraints or negative examples. In particular, "创建技能" and "发布技能" could match ordinary conversation about skills rather than a narrowly defined invocation condition for this specific guide skill.
The file uses Chinese in the description and trigger guidance, but does not indicate that users can choose another language or that the Chinese-only presentation is intentional and justified. This can be a language policy concern if the organization expects skills not to force a specific language without user opt-in.
No suspicious patterns detected.
