博客发布规则 本项目是 astro-koharu 博客。博客发布规则

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used on the intended server, the agent can add new blog posts and trigger a build that may publish them.

Why it was flagged

The skill uses file-writing and command execution to update a website. This is purpose-aligned and bounded, but it is still a meaningful action users should understand.

Skill content
Create the Markdown file only under `/www/wwwroot/www.wanziyoo.com/src/content/blog/` ... Run `cd /www/wwwroot/www.wanziyoo.com && pnpm build` after creating formal posts.
Recommendation

Use it only for the intended blog directory, review generated posts before publishing when needed, and keep backups or version control for the site.

What this means

The skill may fail or behave unexpectedly if installed somewhere without the expected Astro project and pnpm environment.

Why it was flagged

The metadata does not declare a pnpm requirement even though the documented workflow runs the existing project's `pnpm build`; users should verify the local project and toolchain themselves.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Before use, confirm the target server path exists, pnpm is installed, and the blog build script is trusted.