teacher-prep

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent lesson-preparation helper, with the main things to notice being its Tavily API key use, Python document-generation dependencies, and local file creation.

This skill looks safe for its stated purpose if you expect it to search the web and create local teaching files. Before installing, make sure you are comfortable providing a Tavily API key if needed, install Python document libraries from trusted sources, and review generated materials for accuracy before classroom use.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

The agent may use a Tavily API key to run lesson-related searches.

Why it was flagged

The skill discloses use of an external search API credential. This is purpose-aligned for gathering lesson materials, but users should notice that a credential may be used.

Skill content

Tavily 搜索（需 TAVILY_API_KEY 环境变量）

Recommendation

Use a scoped Tavily key intended for this purpose, and avoid exposing unrelated secrets in the same environment.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The skill may not work until these packages are installed, and users should install them from trusted sources.

Why it was flagged

The skill depends on Python packages for document generation, but the install metadata does not declare an install mechanism or pinned package versions. There is no automatic install behavior shown.

Skill content

- python-pptx（生成 PPT）
- python-docx（生成 Word 文档）

Recommendation

Declare dependencies and versions in installation metadata; users should install required packages through a trusted package manager.

Info

#ASI02: Tool Misuse and Exploitation

What this means

The skill will create lesson-preparation files in the working location when used.

Why it was flagged

The skill is designed to create local output files as part of its normal workflow. This is purpose-aligned and disclosed, but users should expect file writes.

Skill content

完成备课任务后，生成以下三个文件：
1. `备课资料_<课文名>.md`
2. `教案_<课文名>.pptx`
3. `练习题_<课文名>.docx`

Recommendation

Run it in an appropriate project or working folder and review generated files before sharing or using them in class.