KAM 千路文档标准

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Business spreadsheets or document files could be uploaded through a separate integration if the user asks for that workflow.

Why it was flagged

The skill discloses that, if another filebrowser-related integration is available, it may be used to upload or transfer files on the user's behalf. This is not hidden and appears optional, but it involves passing files through another tool boundary.

Skill content
上传:若有 filebrowser-api / kam-filebrowser-operator 可代传;本 skill 只做表头/命名。
Recommendation

Only allow uploads when you intentionally requested them and understand the destination, account, and access permissions of the filebrowser integration.