Cmd Helper

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is a user-triggered command menu; its main noteworthy behavior is that it can guide the agent to change session/model settings when the user selects those options.

This appears safe to install as an instruction-only shortcut menu. Before using model-switching or reset options, remember that they can change how the agent behaves or affect the current session state.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#ASI02: Tool Misuse and Exploitation

Low

What this means

If the user selects these menu actions, the agent may start a new session or change the default model used by future interactions.

Why it was flagged

The skill instructs the agent to use platform tools that can spawn sessions, read session status, and modify the default model. These actions are disclosed and match the command-menu purpose, but they can affect the user's agent configuration.

Skill content

1. **新建会话** - 使用 sessions_spawn 启动新会话
2. **切换模型** - 使用 gateway config.patch 修改默认模型
3. **查看状态** - 使用 session_status 工具获取

Recommendation

Use the menu only when you intend to change session or model settings, and confirm the selected model before allowing a configuration change.