Skillv1.0.0

ClawScan security

feishu-doc-tech-optimizer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 5, 2026, 9:30 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only editing prompt that is internally consistent with its stated purpose (strictly reformat/optimize Feishu docs) and requests no credentials or installs.
Guidance: This skill is an instruction-only prompt that enforces a very strict, silent editing style and does not itself request any credentials. Before installing, confirm how your agent/platform will obtain permission to modify Feishu documents (separate Feishu integration or credentials) and whether edits will be auditable. Because the skill forbids explanatory output, you will not get rationales or change logs from the skill itself — test it on non-production documents first, ensure least-privilege Feishu access, and require explicit human review or logging if you need provenance for edits.

Purpose & Capability: noteThe name/description claim in-place editing of Feishu documents; the skill is instruction-only and requests no binaries, installs, or credentials. That is coherent if the agent/platform already provides Feishu access separately, but the SKILL.md does not itself declare or require any Feishu-specific credentials or APIs.
Instruction Scope: noteSKILL.md is a strict editing prompt: it instructs the agent to output only the final modified document (or a single '[无法修改] + 原因' message) and forbids explanations or chain-of-thought. It does not instruct the agent to read unrelated files, env vars, or external endpoints. The suppression of explanations reduces transparency (you won't see rationale or intermediate steps).
Install Mechanism: okNo install spec or code files are present; instruction-only skills are lowest-risk from an install perspective.
Credentials: okThe skill requests no environment variables, credentials, or config paths. This is proportionate for a formatting/optimization prompt. If the agent will actually edit Feishu documents, Feishu credentials would be handled by the platform, not this skill.
Persistence & Privilege: okalways is false and the skill does not request persistent presence or modify other skills. Autonomous invocation is allowed by default but not a red flag alone here.