v0.1.0

附近取款机

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:26 AM.

Analysis

This instruction-only ATM finder is coherent and purpose-aligned, with only a minor packaging note about an unbundled local response-schema link.

GuidanceBefore installing, note that the skill needs your location to find nearby ATMs, which is expected for this purpose. The main improvement would be for the publisher to include the referenced response-format file instead of linking to a local developer path.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

统一参见 [STANDARD_RESPONSE.md](file:///Users/mac_lkm/workspace/trae/100fj/.trae/skills/STANDARD_RESPONSE.md)

The skill points to an absolute local file URI for its standard response schema, but the manifest provides only SKILL.md. This is a packaging/provenance gap, not evidence of malicious behavior.

User impactThe agent or user may not be able to verify the exact response format, and the local file link may not exist outside the publisher’s environment.

RecommendationBundle STANDARD_RESPONSE.md with the skill or inline the response schema, and use a relative path instead of an absolute file:// link.