Deep Research Work From Xian.LaoJ

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have limited external context for verifying the publisher or project source before trusting the skill.

Why it was flagged

The skill has limited provenance metadata, although the provided artifacts do not show dependency installation, remote scripts, or automatic execution.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the registry owner and review the included files; no automatic install-time code execution is evidenced.

What this means

The agent may browse or fetch online content and write research outputs as part of the task.

Why it was flagged

The skill explicitly uses broad web and file-processing tools. This is expected for deep research, but users should know the agent may fetch web pages and create or edit research files.

Skill content
Web Research - `web_search` ... `web_fetch` ... `browser`; Content Processing - `read` ... `write` ... `edit`
Recommendation

Give clear boundaries for allowed sources, documents, and report locations, and review outputs before relying on them.

What this means

Saved research notes or memory could influence later work or retain information longer than expected.

Why it was flagged

The skill can reuse previous research context and create persistent records, which is useful for research continuity but can preserve outdated, incorrect, or sensitive information.

Skill content
`memory_get` / `memory_search`: Reference previous research ... `write`: Create persistent research records
Recommendation

Avoid saving sensitive personal or confidential material unless intended, and periodically review or clear stored research context.