Back to skill
Skillv1.0.0
ClawScan security
teaching-plan-writer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 15, 2026, 2:34 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's files and runtime instructions are coherent with its stated purpose (generating curriculum-aligned lesson plans) and do not request unexpected system privileges, credentials, or installs.
- Guidance
- This skill appears coherent for generating K–12 lesson plans. Before installing or invoking it, confirm how the agent will perform web searches and where generated Word files are stored/shared (internal platform storage vs external upload). Avoid providing real student personal data to the skill (search/aggregation steps may involve external queries). Also be aware of copyright: the skill aggregates existing lesson plans as references—review outputs for potential verbatim copyrighted text and adapt as needed. If you require stricter controls, ask the skill author to specify which search endpoints/browsers/storage it will use or to restrict searches to licensed/whitelisted resources.
Review Dimensions
- Purpose & Capability
- okName/description (教案写作) match the included templates, subject guides, and the SKILL.md instructions. The requirement to search for exemplar lesson plans on the web is consistent with the stated goal of synthesizing at least 20 high-quality resources.
- Instruction Scope
- noteSKILL.md and role-requirements instruct the agent to 'search the web' for ≥20 excellent lesson plans and to produce downloadable Word output. This is within scope for a lesson-plan generator, but the instructions are somewhat high-level (no specific search endpoints or storage/upload mechanism). That vagueness could influence how the agent uses available browsing/search capabilities and where generated files are hosted.
- Install Mechanism
- okInstruction-only skill with no install spec, no code files to execute, and no downloads — lowest install risk.
- Credentials
- okNo environment variables, credentials, or config paths are requested. The skill does not ask for unrelated secrets or system file access.
- Persistence & Privilege
- okalways is false and agent autonomous invocation is default; the skill does not request elevated or persistent system privileges nor modify other skills' configs.