框架核心工程师路由事件与扩展

PassAudited by ClawScan on May 8, 2026.

Overview

This is a coherent instruction-only engineering skill; it asks for expected route refresh and validation commands but shows no hidden code, credentials, persistence, or suspicious data handling.

This skill appears safe for a framework routing/extension engineering workflow. Before installing, be aware that it may guide the agent to update route-related code/configuration and run a route-refresh command; use normal code review and run it in a controlled development environment.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Using the skill may lead the agent to refresh route registration or run route checks in your project.

Why it was flagged

This is a local framework command that can update route registration state. It is disclosed and directly related to the skill's routing purpose, but users should notice it because it changes project/framework state.

Skill content

Run `php bin/w setup:upgrade --route` when route registration changes.

Recommendation

Run these commands only in the intended workspace, review route/config changes in version control, and avoid applying them directly to production without approval.