Skillv1.0.2

ClawScan security

国创赛指南-中国国际大学生创新大赛参赛助手 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 16, 2026, 9:23 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is an instruction-only contest guidance assistant that only asks for user project info and to call an external 'pptx' skill to generate PPTs; its declared requirements and behavior are coherent with that purpose.
Guidance: This skill appears coherent and low-risk by itself. Before installing or enabling it for autonomous use, check the pptx skill it calls: confirm what that skill does with files (local write, uploads, external APIs) and whether it requires credentials or network access. Also confirm the presence of referenced assets/templates and note the small metadata version mismatch (likely harmless bookkeeping). If you permit autonomous invocation, remember the agent may call the pptx skill on its own when asked to generate presentations.

Purpose & Capability: okName/description match the instructions: guidance for the China International University Innovation Contest and PPT generation. No unrelated binaries, env vars, or cloud credentials are requested. Minor metadata inconsistency: _meta.json shows version 1.0.0 while registry lists 1.0.2 (likely bookkeeping error).
Instruction Scope: noteSKILL.md stays within its scope: it collects user/project info, interprets evaluation criteria, and delegates PPT creation to a pptx skill via use_skill. The only operational action is calling the pptx skill; verify that the pptx skill's permissions and behavior are appropriate before allowing delegation.
Install Mechanism: okNo install spec and no code files — instruction-only skill. Nothing will be written to disk or downloaded by this skill itself.
Credentials: okThe skill declares no required environment variables, credentials, or config paths; that is proportionate to its stated functionality.
Persistence & Privilege: okalways is false and model invocation is allowed (default). The skill does not request permanent presence or modify other skills; normal privilege profile for an instruction-only skill.