油价智能提醒
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned: it checks an official oil-price page, stores a small local reminder state, and can schedule recurring reminders, with no evidence of credential use, exfiltration, or destructive behavior.
This looks safe for its stated purpose, but enabling it may create a recurring scheduled task and a local state file. Confirm the check frequency, notification channel, and how to disable the cron job if you stop using the reminder.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The reminder may keep running periodically and sending notifications after it is enabled.
The skill documents a recurring scheduled job. This is expected for an automatic reminder skill, but it means activity may continue after initial setup unless the user disables it.
创建 cron job，每 3 天触发一次
Before enabling, confirm the schedule and how to pause or delete the cron job if you no longer want reminders.
The skill will run a local command to retrieve oil-price announcement pages.
The script invokes the local curl binary to fetch web pages. The URL flow is limited to the documented NDRC source and uses an argument list rather than shell execution, so this is purpose-aligned.
subprocess.run(['curl', '-s', url], capture_output=True, text=True, timeout=12)
Install only if you are comfortable with the skill making periodic network requests to the official NDRC site.
The skill may not work as expected if Python, curl, cron, or the messaging mechanism are unavailable or differently configured.
The documentation lists runtime dependencies, while the registry requirements and install spec declare none. The dependencies are visible and purpose-aligned, but the metadata is incomplete.
- Python 3 - curl（系统自带） - cron（Gateway 内置） - message tool（推送至用户渠道）
Verify the required runtime tools and messaging setup before relying on the reminder.