Skillv1.0.0

ClawScan security

Cn Percent Calculator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 30, 2026, 1:16 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is internally consistent: it implements a local percentage calculator, requests no credentials or network access, and its code matches the SKILL.md instructions.
Guidance: This skill appears safe and coherent: it runs locally, needs no network access or credentials, and the code matches the documentation. If you plan to automate it, note the natural-language parser is simple and may mis-interpret some inputs (especially unusual phrasing or discount formats). Also verify how your platform executes skill code (sandboxing) before granting broader automation rights, but there are no immediate red flags in this package.

Purpose & Capability: okName/description (百分比计算) align with the included script. The script implements percent/value/growth/discount/vat calculations and requires no external services or credentials—consistent with the stated purpose.
Instruction Scope: noteSKILL.md contains only local usage and CLI parameter instructions; it does not instruct reading unrelated files, env vars, or contacting external endpoints. The natural-language parsing is limited to a few Chinese patterns and has some minor quirks (regexes may not match all phrasings; discount parsing and percent formatting use nonstandard heuristics), but these are functional issues, not scope or privacy concerns.
Install Mechanism: okNo install spec or external downloads. This is an instruction-only skill with an included Python script; nothing will be fetched from the network during install.
Credentials: okNo required environment variables, credentials, or config paths. The skill does not access secrets or unrelated system configuration.
Persistence & Privilege: okalways is false and the skill is user-invocable. It does not request persistent privileges or modify other skills or system-wide settings.