Skillv1.0.2

ClawScan security

什么值得买价格爬取 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 15, 2026, 1:46 PM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's instructions, requirements, and scope are coherent for a webpage price-scraping helper for smzdm.com; it requests no credentials, has no install steps, and its runtime steps stay within the stated purpose.
Guidance: This skill appears coherent and focused on scraping public product pages on smzdm.com. Before installing: ensure your agent's 'browser' and 'snapshot' tools are trustworthy and do not exfiltrate data to unexpected endpoints; respect smzdm.com's robots/TOS and add rate limiting to avoid abusive scraping; verify the agent follows the SKILL.md guidance about using the page /url fields (not redirect shorteners) if you require direct product links. If you need higher assurance, inspect the agent tool implementations (browser/snapshot) to confirm they don't send additional context or system data to third parties.

Purpose & Capability: okName and description match the instructions: all steps relate to scraping product prices from smzdm.com. No unrelated environment variables, binaries, or installs are requested.
Instruction Scope: noteSKILL.md confines actions to opening smzdm search pages and reading structured snapshot text (no file system, no credentials). It explicitly forbids screenshots/OCR and instructs to use snapshot text. Note: it assumes the agent provides a 'browser' and 'snapshot' tool; if those tools expose data externally or have broad privileges, that is an external consideration but not part of this skill's instructions.
Install Mechanism: okInstruction-only skill with no install spec and no code files—lowest-risk install posture. Nothing is downloaded or written to disk by the skill itself.
Credentials: okRequires no environment variables, credentials, or config paths. All data access is limited to public pages on smzdm.com as described.
Persistence & Privilege: okalways:false and disable-model-invocation:false (normal). The skill does not request persistent system-wide changes or modify other skills.