v2.1.1

calculuslobt

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:35 AM.

Analysis

This appears to be an instruction-only calculus tutoring skill with no code, install steps, credentials, or data access, with only minor artifact cleanup issues noted.

GuidanceThis skill does not request security-sensitive setup or access. Before using it broadly, clean the leftover tool-call/reasoning fragments from the sample exam references and align the packaged metadata version with the registry.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agent Goal Hijack

SeverityLowConfidenceHighStatusNote

references/sample-exam-v2.1.0.md

</think>
修正第 3 题以保证有明确错误选项，并补全「附：评分要点」。
<｜tool▁calls▁begin｜><｜tool▁call▁begin｜>
StrReplace

This looks like leftover reasoning/tool-call transcript text rather than calculus teaching content. If a downstream agent loads this reference as instruction context, it could be distracted into an editing/tool-use goal, although no harmful tool arguments, exfiltration, or destructive action are shown.

User impactThe assistant might echo confusing internal-looking text or briefly treat an old edit note as part of the lesson material.

RecommendationRemove model reasoning and tool-call remnants from reference files so they contain only final educational content.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

_meta.json

"version": "2.1.0"

The registry metadata lists version 2.1.1, while the packaged _meta.json still says 2.1.0. This is a version/provenance hygiene mismatch, not evidence of unsafe runtime behavior.

User impactIt may be harder to confirm exactly which revision of the skill is installed or reviewed.

RecommendationAlign _meta.json with the registry/SKILL version before publishing or relying on version-specific behavior.