Security audit
什么值得买
Security checks across malware telemetry and agentic risk
Overview
This is an instruction-only Chinese shopping-advice skill whose declared purpose, instructions, and metadata are internally consistent and do not request extra credentials, installs, or unusual privileges.
This skill is instruction-only and internally consistent, but it expects the agent to be able to fetch current marketplace prices (Taobao/Tmall, JD, PDD, Douyin, local channels). Before installing, confirm whether your agent has network/browsing connectors or e-commerce integrations — otherwise answers will be heuristic, not real-time. There's no credential or install requirement, which limits risk, but also means the skill cannot itself query private APIs. If you need provenance, check the referenced GitHub repo (clawhub.json) or ask the publisher for a homepage/source; absence of a verified homepage simply means you can't easily audit its origin, not that the skill is malicious.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.