Skillv1.0.0

ClawScan security

Opinion Analyzer — 多视角舆情分析助手 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 10, 2026, 2:09 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requests and instructions match its stated purpose (multi-perspective public-opinion analysis); it is an instruction-only skill with no extra env vars, installs, or unexpected privileges.
Guidance: This skill appears coherent and low-risk in itself, but consider the following before installing: 1) Data sources — confirm the agent will only access public content and will respect platform terms of service and rate limits; avoid feeding private or sensitive data into the skill. 2) Attribution — ask the skill to include citations or source links in its report so you can verify claims; the SKILL.md does not require this but it's important for trust. 3) Bias & defamation risks — simulated personas and summarization can amplify bias or incorrectly attribute statements; review outputs before sharing. 4) Dependent skills — it references a web-search/browsing skill (EdgeBrowser_Web_Search); check that skill's permissions and behavior. 5) If you need analyses that involve private accounts or restricted platforms, require explicit, secure credentials and confirm legal permissions first. Overall: reasonable to install if you accept these caveats and monitor source handling and citations.

Purpose & Capability: okName and description claim multi-perspective public-opinion analysis and the SKILL.md only asks the agent to perform web searches, collect public viewpoints, simulate perspectives, and generate a report — all coherent with the stated purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope: noteInstructions are narrowly scoped to public web searches (or delegating to an EdgeBrowser_Web_Search skill), collecting ~10–15 representative public viewpoints, analyzing sentiment and arguments, simulating four personas, and producing a structured report. This stays within the skill's purpose. Note: collecting social-media comments or forum content may implicate platform TOS, rate limits, or access restrictions; the SKILL.md does not instruct the agent to retrieve private data or use credentials, but the actual behavior will depend on whatever browsing/search skill is used.
Install Mechanism: okNo install spec and no code files — instruction-only. This minimizes supply-chain risk and nothing is written to disk by the skill itself.
Credentials: okThe skill requests no environment variables, credentials, or config paths. The declared requirements are proportional to its stated functionality.
Persistence & Privilege: okalways:false and default invocation settings are used. The skill does not request persistent or elevated privileges or attempt to modify other skills or global agent settings.