shumianyu

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill coherently rewrites accumulated ASR text at the end of a session; the main thing to notice is that transcripts are buffered and may be archived depending on implementation.

This skill appears safe and purpose-aligned as an instruction-only ASR cleanup workflow. Before installing or integrating it, confirm how your environment stores the accumulated transcript buffer, whether transcripts are archived, and how they are cleared after final output.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Meeting, interview, or dictation content could remain in an implementation's buffer or archive longer than the user expects.

Why it was flagged

The skill intentionally accumulates the full ASR session in a buffer and may clear or archive it after output. This is central to the stated purpose, but it creates a retention point for potentially sensitive speech transcripts.

Skill content
将各分段合并到同一缓冲区 ... commit_final_output(...) —— 提交最终结果并清空或归档当前缓冲区
Recommendation

Use this skill with an implementation that scopes buffers per session, clears them by default, and only archives transcripts with clear user intent or retention settings.