Gaokao Essay

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run the packaged script on your machine to generate essay content.

Why it was flagged

The skill's normal operation is to execute a bundled local shell script. This is disclosed and purpose-aligned, but it is still local code execution users should notice.

Skill content
Agent should run the script and return output to user. Example: bash scripts/essay.sh write "人生的选择" --type 议论文
Recommendation

Use it only for the documented essay commands and review bundled scripts first if local execution is a concern.

What this means

A user or agent that runs this extra utility could create local files unrelated to essay generation.

Why it was flagged

The manifest includes an auxiliary generic utility that is not part of the documented essay.sh command table; if run, it creates a local data area. This is low-impact but less coherent than the main essay script.

Skill content
# gaokao-essay - Multi-purpose utility tool
DATA_DIR="${GAOKAO_ESSAY_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/gaokao-essay}"
DB="$DATA_DIR/data.log"
mkdir -p "$DATA_DIR"
Recommendation

Prefer the documented scripts/essay.sh workflow; the publisher should remove or clearly document this auxiliary utility if it is intended to be used.

What this means

If this auxiliary script is used, some typed content may remain in local history or data files.

Why it was flagged

The auxiliary utility can persist command text and added entries in local files. The documented essay workflow does not use this storage, but users should avoid entering sensitive text into it.

Skill content
_log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }
cmd_add() {
    echo "$(date +%Y-%m-%d) $*" >> "$DB"; echo "  Added: $*"
}
Recommendation

Do not use the auxiliary add/log functions for sensitive personal content, or clear the gaokao-essay data directory after testing.