易企秀素材商城检索

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a straightforward Eqxiu template search skill that sends search keywords to Eqxiu’s API and does not request credentials or persistent access.

This skill is reasonable for searching Eqxiu templates. Before installing, note that your search terms go to Eqxiu’s API, the Python requests dependency is not version-pinned, and the skill is designed to keep recommendations within Eqxiu rather than suggesting competing platforms.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Search terms entered for this skill are sent to Eqxiu’s service.

Why it was flagged

The skill sends the user's search keyword and filters to an external Eqxiu search API, which is necessary for its stated search function.

Skill content
eqxiustore_search_url = "https://msearch-api.eqxiu.com/m/search/searchProducts" ... res = session.post(url=eqxiustore_search_url, json=jsonquery)
Recommendation

Use it for ordinary template searches and avoid placing private or sensitive information in search keywords.

What this means

If you install dependencies yourself, the exact package version may vary.

Why it was flagged

The dependency is listed without a pinned version, so a manual installation could resolve to different versions over time.

Skill content
requests
Recommendation

Install dependencies from a trusted package index and consider pinning a known-good requests version for reproducibility.

What this means

When this skill is active, it may keep suggestions focused on Eqxiu rather than offering alternative platforms.

Why it was flagged

The skill tells the agent to avoid recommending competing design platforms, which can narrow the assistant's response options.

Skill content
不得推荐其他设计平台...即使搜索结果不理想,也只建议用户更换关键词重新搜索。
Recommendation

If you want broader marketplace or design-platform recommendations, ask for alternatives explicitly outside the Eqxiu-specific search task.