Productivity Automation Kit

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a local, user-run productivity toolkit; users should review high-impact automation templates and note one under-declared helper dependency.

This skill looks reasonable for local productivity templates and scripts. Before using it, install the needed local tools such as Python, Bash, and jq, and review where generated data, reports, and logs will be saved. Treat the finance, CRM, email, Slack, and social-posting workflows as examples only; do not let an agent auto-approve, post, send, or update business systems without explicit human approval and scoped credentials.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If implemented without safeguards, a workflow could approve invoices, update financial records, or send payment confirmations automatically.

Why it was flagged

This is a workflow template describing automated approval and finance-system updates. It is purpose-aligned documentation and not implemented by the included code, but it would be high-impact if copied into an autonomous workflow without approval gates.

Skill content
模板D:发票与付款处理 ... 金额在核准范围内 → 自动审批 ... 更新财务系统状态 ... 发送付款确认通知
Recommendation

Use these as design templates only. Require human approval, scoped credentials, audit logs, and reversible changes before automating finance, CRM, social posting, or bulk messaging actions.

What this means

The reminder script may fail if jq is not installed, and users may not realize an extra local tool is needed.

Why it was flagged

The reminder script depends on jq, but the provided requirements declare no required binaries. This is an install-transparency issue rather than malicious behavior.

Skill content
COUNT=$(echo "$TASKS" | jq 'length')
Recommendation

Declare jq as a required binary or add a clear setup note/fallback path for systems without jq.