Skillv1.0.0

ClawScan security

Legal Doc Writer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 15, 2026, 1:02 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is an instruction-only Chinese tax/legal document drafting assistant that contains templates and scoped runtime instructions, requests no credentials or installs, and is internally consistent with its stated purpose.
Guidance: This skill appears coherent and does what it says: templates and a drafting workflow for Chinese tax/legal documents. Before installing or using it, consider: 1) do not supply sensitive client PII or confidential documents unless you trust the agent environment — the workflow explicitly collects facts and evidence; 2) the skill delegates to other skills (china-tax-law, case-research, tax-calculator, docx) — review those skills' permissions and credentials before allowing them to run; 3) always have a qualified lawyer review final outputs (this skill assists drafting but is not a substitute for legal review); and 4) verify any cited statutes or cases against authoritative sources and check applicability by date/jurisdiction.

Purpose & Capability: okName/description, templates, and runtime instructions all align: the skill is explicitly a Chinese tax/legal document drafting helper and contains templates and workflow steps appropriate to that purpose.
Instruction Scope: noteInstructions stay within the drafting/review workflow (collect facts, cite laws, use templates, export .docx) but explicitly tell the agent to collect client facts/evidence and call other skills (china-tax-law, case-research, tax-calculator, docx). This is expected for the purpose but means the agent may handle sensitive client PII and will delegate work to other skills whose behavior/permissions should be reviewed.
Install Mechanism: okInstruction-only skill with no install spec and no code files — nothing is written to disk or downloaded at install time.
Credentials: okNo environment variables, credentials, or config paths are requested. The declared requirements are minimal and proportionate to a document-drafting helper.
Persistence & Privilege: okalways is false and the skill is user-invocable; it does not request permanent presence or elevated platform-wide privileges.