Skillv1.2.1

ClawScan security

企查查 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

SuspiciousMar 6, 2026, 1:41 PM

Verdict: suspicious
Confidence: medium
Model: gpt-5-mini
Summary: The skill's behavior generally matches its stated purpose, but it contains an embedded third‑party API key and an npm dependency lockfile that references HTTP package mirrors — both are unexpected and warrant caution.
Guidance: Before installing or running this skill: 1) Review qichacha.js yourself (or have someone you trust do so) — it contains a hard‑coded Tavily API key; consider removing or rotating that key if you control it. 2) Be aware that running npm install will fetch dependencies and package tarballs (package-lock.json points to HTTP mirrors), which increases the risk of tampered packages — prefer running in a sandbox or verifying package integrity. 3) If you require guarantees about data handling, prefer skills that ask you to provide your own API credentials (instead of embedding a vendor key) or that call the official public sites directly. 4) If unsure, do not run npm install or run the script on an isolated machine/container and monitor outbound network traffic (api.tavily.com).

Review Dimensions

Purpose & Capability: noteThe skill claims to query public company info from sources like 企查查/天眼查; the implementation instead proxies queries through a third‑party service (api.tavily.com). Using an aggregator is plausible, but the code also lists an unused dependency (node‑fetch) in package.json — a minor mismatch but not directly harmful.
Instruction Scope: noteSKILL.md instructs the agent/user to run npm install and execute qichacha.js — that matches the included code. The README references direct data sources (企查查/天眼查) but the runtime actually sends search queries to Tavily; SKILL.md does not mention this external service or the embedded API key.
Install Mechanism: concernThere is no formal install spec, but SKILL.md tells users to run npm install in the skill directory. package-lock.json records dependencies and resolved tarball URLs that point to mirrors.tencentyun.com via plain HTTP; fetching packages over HTTP increases tampering risk. Also the code does not use the declared dependency (node‑fetch), so npm install will pull unused packages.
Credentials: concernThe skill requests no user credentials, which is reasonable, but it hard‑codes a Tavily API key inside qichacha.js. Embedding a third‑party API key in source is unexpected (and could expose that key or allow the maintainer to observe all queries). The skill does not require or ask for the user's credentials — which reduces direct exfil risk — but the presence of a secret in code is a proportionality/privacy concern.
Persistence & Privilege: okThe skill does not request always:true, does not modify other skills or system-wide settings, and is user-invocable only. It does perform network calls at runtime (to api.tavily.com), which is expected for a lookup skill.