德牧洒洒·房车陪伴助手
ReviewAudited by ClawScan on May 10, 2026.
Overview
This looks like a local demo that may tell users it has performed real navigation, email, or camera actions even though the provided artifacts do not show real integrations.
Review this before installing if you expect a real assistant. It appears safe from an install-code perspective, but its UI may simulate actions like checking mail, using the camera, or starting navigation. Only grant real app, microphone, camera, or email permissions if the skill clearly explains what it will access and asks before taking sensitive actions.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could believe important real-world actions happened—such as checking email, starting navigation, or saving a photo—when the skill may only be displaying canned text.
The visible JavaScript response library returns messages claiming that email was checked and a photo was saved, but the provided artifacts do not show mail or camera integration that would make those claims true.
"邮件": () => `正在检查邮箱... 📧\n\n您有 2 封未读邮件...` ... "拍照": () => `咔嚓！📸 已拍摄并保存到相册！`
Clearly label these as demo/mock responses, or implement real integrations with visible permission prompts, success/failure checks, and accurate status messages.
If later connected to real device or account tools, the assistant could perform sensitive actions such as replying to email or using the camera without clearly documented safeguards.
These advertised capabilities could affect accounts, apps, device sensors, or travel decisions if connected to real tools, but the artifacts do not define approval, scoping, or reversal behavior.
- 高德导航控制（目的地、路况、加油站查询） - 邮件查询与回复 - 腾讯会议快速加入 - 相机控制 - 忠诚专注，听令立行，不废话
Require explicit user confirmation for email replies, meeting joins, camera actions, and navigation changes, and document exactly which tools and permissions are used.