Quiz Generator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only quiz generator with no code execution, credentials, installs, or system access; the main cautions are non-clinical framing for mental-health quizzes and referenced helper files that are not included.

This skill appears safe to install from an agentic-security perspective because it only provides quiz-generation instructions. Treat any mental-health test output as informal content, not medical advice, and review any external scripts if they are later added or downloaded separately.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI09: Human-Agent Trust Exploitation
Low
What this means

A user might place too much trust in AI-generated depression, anxiety, or stress results.

Why it was flagged

The skill explicitly supports generating mental-health self-tests. This is aligned with the quiz-generator purpose, but without disclaimers users could mistake generated quizzes for validated clinical assessments.

Skill content
### 心理类
- 抑郁症自测
- 焦虑程度测试
- 压力水平测试
Recommendation

Add clear language that mental-health quizzes are for informal reflection only, not diagnosis or treatment advice, and recommend professional help for serious concerns.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

If a future or external version supplies these scripts, their behavior has not been reviewed here.

Why it was flagged

SKILL.md references helper scripts/resources, but the provided package is instruction-only and the manifest contains only README.md, SKILL.md, and test_output.md. There is no evidence these scripts are executed, so this is a review-context note rather than a security concern.

Skill content
- `scripts/generate_quiz.py` - 测试题生成脚本
- `scripts/calculate_score.py` - 评分计算脚本
Recommendation

Do not run any separately obtained helper scripts unless they are included in the reviewed package or independently inspected.