ClawHub
Back to skill

Security audit

什么值得买

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only Chinese shopping-advice skill whose declared purpose, instructions, and metadata are internally consistent and do not request extra credentials, installs, or unusual privileges.

This skill is instruction-only and internally consistent, but it expects the agent to be able to fetch current marketplace prices (Taobao/Tmall, JD, PDD, Douyin, local channels). Before installing, confirm whether your agent has network/browsing connectors or e-commerce integrations — otherwise answers will be heuristic, not real-time. There's no credential or install requirement, which limits risk, but also means the skill cannot itself query private APIs. If you need provenance, check the referenced GitHub repo (clawhub.json) or ask the publisher for a homepage/source; absence of a verified homepage simply means you can't easily audit its origin, not that the skill is malicious.

Static analysis

No suspicious patterns detected.