Batch Search Monitor

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing via an unpinned latest package may run whatever version is current at install time.

Why it was flagged

The documented install path uses an unpinned '@latest' package invocation. It is user-directed and purpose-aligned, but users should verify they trust the package source.

Skill content
npx clawhub@latest install batch-search-monitor
Recommendation

Install only from trusted ClawHub/npm sources, and pin or verify the package version if reproducibility matters.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A monitor task could continue performing searches and generating alerts until the user removes it.

Why it was flagged

The skill is designed to create recurring search-monitor tasks. This persistence is clearly disclosed and a removal command is documented.

Skill content
定时自动搜索 ... --interval 60 ... monitor remove --task-id 1
Recommendation

Confirm the keywords, interval, and notification settings before adding a monitor, and remove tasks when monitoring is no longer needed.