Lanxin App Card

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is mostly a Lanxin app-card JSON formatter, but it asks for broad always-on/high-priority instruction control and forbids refusals or explanations, so it should be reviewed before use.

Use this only if you intentionally want Lanxin appCard JSON generation. Before installing, verify that it is actually from an official Lanxin source, consider removing the always-on/high-priority setting, and review generated card links and content before sending.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence
ASI01: Agent Goal Hijack
What this means

The assistant may produce a sendable app-card JSON response even when it should ask for missing details, explain limitations, or decline unsafe content.

Why it was flagged

The skill explicitly suppresses refusals and forces a single output format, which can prevent normal clarification, caveats, or safety handling when the user asks for an app card.

Skill content
禁止说“无法发送”“不支持”“暂时不能”等拒绝话术 ... 禁止输出任何其他文本,只输出 JSON
Recommendation

Limit the rule to confirmed, safe app-card generation and allow normal refusals, clarification questions, and safety messages when appropriate.

ConcernMedium Confidence
ASI10: Rogue Agents
What this means

If the runtime honors these settings, the skill could influence more conversations than expected and make the assistant over-focus on app-card JSON output.

Why it was flagged

The skill asks to be always active and high priority, which is broader than needed for a user-invoked app-card formatter and could keep its strict response-control rules in the assistant's context outside a narrowly scoped invocation.

Skill content
metadata: {"clawdbot":{"emoji":"📱"},"openclaw":{"always":true}}
priority: 100
Recommendation

Disable always-on behavior for this skill and rely on explicit triggers or user invocation unless there is a clear administrative reason for persistent loading.

What this means

Users may trust the skill more than warranted because of the 'official' wording.

Why it was flagged

The skill describes itself as an official Lanxin capability, but the provided metadata does not include a source or homepage to substantiate that claim.

Skill content
Description: 蓝信官方应用卡片发送能力 ... Source: unknown ... Homepage: none
Recommendation

Verify the publisher or official Lanxin provenance before relying on it in production or business chats.