Back to skill
Skillv1.0.1
ClawScan security
Tencent Cloud Article Extractor · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 16, 2026, 12:54 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code and instructions match its stated purpose (fetch a cloud.tencent.com article, parse __NEXT_DATA__, and convert it to Markdown); it requests no credentials or unusual system access.
- Guidance
- This skill appears to do exactly what it says: fetch a public cloud.tencent.com article and convert it to Markdown. Before installing/running: (1) review the script file locally (it runs on your machine) to ensure you are comfortable executing it; (2) be aware it needs network access to cloud.tencent.com and will reference images by their remote URLs (it does not download images); (3) the skill has no homepage/source information — if provenance is important, consider obtaining the source from a trusted location or author; (4) watch output file paths to avoid accidental overwrites; and (5) respect copyright/terms of use when copying or storing article content.
Review Dimensions
- Purpose & Capability
- okName/description describe extracting Tencent Cloud articles and producing Markdown; the included script fetches the article URL, parses page JSON, extracts metadata and content, and renders Markdown — this is proportionate and expected.
- Instruction Scope
- okSKILL.md and the script only perform an HTTP GET to the provided cloud.tencent.com URL, parse the page's __NEXT_DATA__, transform content to Markdown, and optionally write a local file. They do not read other files, environment variables, or transmit data to third-party endpoints.
- Install Mechanism
- okNo install spec; this is an instruction+script skill. The code is plain JavaScript (no external downloads or extract steps). Risk from installation is minimal — user runs the included script locally.
- Credentials
- okThe skill requires no environment variables, credentials, or special config paths. Network access to cloud.tencent.com is necessary and justified by the purpose.
- Persistence & Privilege
- okFlags show always:false and user-invocable:true. The skill does not request persistent system privileges or modify other skills/configs. Autonomous invocation is allowed by default but is not combined with other concerning privileges.