Security audit
Security checks for vulnerabilities and agentic risk
This skill is a markdown-only workflow analysis guide that recommends possible OpenClaw automations but does not install code, run commands, or take actions itself.
Install this if you want Chinese-language guidance for deciding which parts of a workflow OpenClaw could automate. Treat its suggestions involving files, shell commands, browser login, APIs, memory, or scheduled jobs as planning advice only, and confirm credentials, permissions, privacy impact, and approval boundaries before building any automation.
The trigger list includes very broad, common phrases such as '分析工作流程' and '哪些可以自动化', which can match many ordinary user requests and cause the skill to activate when not specifically intended. This can lead to inappropriate routing, user confusion, and accidental exposure of workflow details to a skill that the user did not mean to invoke.
The document advertises powerful capabilities including local file access, shell execution, network fetching, browser automation, and persistent memory writes, but it does not pair them with clear cautions about privacy, local system impact, or approval boundaries. In the context of a workflow-analysis skill, this can mislead users into underestimating the risks of suggested automations and may normalize dangerous operations without informed consent.
A skill-facing capability reference that forces a single language can create a language/locale policy concern when no user opt-in or alternative is provided. The file contains only Chinese text and does not mention that the language is region-specific or optional.
No suspicious patterns detected.
