内容创作与发布全流程
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is an incomplete cloud-synced placeholder skill that grants unrestricted Bash access without explaining or limiting what local commands it needs.
Do not install this as-is unless you are comfortable granting broad local shell access. Ask the publisher to provide the complete reviewed skill files, remove or narrowly scope Bash permissions, and document the exact content creation and publishing actions the skill will perform.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked, the agent could potentially run arbitrary local shell commands under this skill's authority, even though the visible skill content does not justify that access.
This grants unrestricted shell-command capability, but the skill does not explain which commands are needed or how use is bounded.
allowed-tools: Bash(*)
Restrict Bash access to specific necessary commands, document exactly when commands may be run, and require clear user confirmation for any local file, network, or publishing action.
The installed artifact may not represent the full behavior of the intended skill; future files or instructions from the repository were not reviewed here.
The reviewed package says the complete content has not been downloaded or tested and tells users to get the full skill from a remote repository.
- [ ] 已下载完整内容 - [ ] 已配置环境变量 - [ ] 已测试运行 请访问云端仓库获取完整的技能文件和使用说明。
Review the referenced repository contents before use, pin a trusted version, and include the complete reviewed files in the skill package rather than relying on out-of-band instructions.