Lanxin App Articles

AdvisoryAudited by VirusTotal on Apr 23, 2026.

Overview

Type: OpenClaw Skill Name: lanxin-app-articles Version: 1.0.0 The skill is a formatting utility designed to generate specific JSON payloads for the Lanxin (蓝信) messaging platform. The instructions in SKILL.md use strict prompt engineering to ensure the agent outputs raw, machine-readable JSON without conversational filler or Markdown formatting. No malicious code, data exfiltration, or unauthorized network activity was detected in index.js or the documentation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When invoked, the agent may return only a raw appArticles JSON payload instead of explaining limitations or asking follow-up questions.

Why it was flagged

The skill uses strong output-control language and includes an always=true value in its own front matter. This fits the card-formatting purpose, but it could limit normal clarification or refusal wording if activated broadly.

Skill content
metadata: {"clawdbot":{"emoji":"📄"},"openclaw":{"always":true}} ... 禁止说“无法发送”“不支持”“暂时不能”等拒绝话术 ... 禁止输出任何其他文本,只输出 JSON
Recommendation

Use this skill only when you intentionally want a Lanxin appArticles JSON card, and review the generated links, titles, and image URLs before posting or sending.

What this means

Users might assume the skill is officially provided by Lanxin even though the artifacts do not independently establish that.

Why it was flagged

The description uses “official” wording, but the supplied metadata does not provide a source or homepage to verify official provenance.

Skill content
Description: 蓝信官方图文卡片发送能力 ... Source: unknown; Homepage: none
Recommendation

Verify the publisher or source if official Lanxin provenance matters for your workspace.