Productivity Automation Kit
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a local, user-run productivity toolkit; users should review high-impact automation templates and note one under-declared helper dependency.
This skill looks reasonable for local productivity templates and scripts. Before using it, install the needed local tools such as Python, Bash, and jq, and review where generated data, reports, and logs will be saved. Treat the finance, CRM, email, Slack, and social-posting workflows as examples only; do not let an agent auto-approve, post, send, or update business systems without explicit human approval and scoped credentials.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If implemented without safeguards, a workflow could approve invoices, update financial records, or send payment confirmations automatically.
This is a workflow template describing automated approval and finance-system updates. It is purpose-aligned documentation and not implemented by the included code, but it would be high-impact if copied into an autonomous workflow without approval gates.
模板D:发票与付款处理 ... 金额在核准范围内 → 自动审批 ... 更新财务系统状态 ... 发送付款确认通知
Use these as design templates only. Require human approval, scoped credentials, audit logs, and reversible changes before automating finance, CRM, social posting, or bulk messaging actions.
The reminder script may fail if jq is not installed, and users may not realize an extra local tool is needed.
The reminder script depends on jq, but the provided requirements declare no required binaries. This is an install-transparency issue rather than malicious behavior.
COUNT=$(echo "$TASKS" | jq 'length')
Declare jq as a required binary or add a clear setup note/fallback path for systems without jq.
