Gaokao Essay
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run the packaged script on your machine to generate essay content.
The skill's normal operation is to execute a bundled local shell script. This is disclosed and purpose-aligned, but it is still local code execution users should notice.
Agent should run the script and return output to user. Example: bash scripts/essay.sh write "人生的选择" --type 议论文
Use it only for the documented essay commands and review bundled scripts first if local execution is a concern.
A user or agent that runs this extra utility could create local files unrelated to essay generation.
The manifest includes an auxiliary generic utility that is not part of the documented essay.sh command table; if run, it creates a local data area. This is low-impact but less coherent than the main essay script.
# gaokao-essay - Multi-purpose utility tool
DATA_DIR="${GAOKAO_ESSAY_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/gaokao-essay}"
DB="$DATA_DIR/data.log"
mkdir -p "$DATA_DIR"Prefer the documented scripts/essay.sh workflow; the publisher should remove or clearly document this auxiliary utility if it is intended to be used.
If this auxiliary script is used, some typed content may remain in local history or data files.
The auxiliary utility can persist command text and added entries in local files. The documented essay workflow does not use this storage, but users should avoid entering sensitive text into it.
_log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }
cmd_add() {
echo "$(date +%Y-%m-%d) $*" >> "$DB"; echo " Added: $*"
}Do not use the auxiliary add/log functions for sensitive personal content, or clear the gaokao-essay data directory after testing.
