Telecom Visit Prep

PassAudited by ClawScan on May 12, 2026.

Overview

This appears to be a coherent instruction-only sales-prep assistant, with expected cautions around external search, optional package setup, API keys, and polished AI-generated output.

Install this if you want an AI-assisted China Telecom enterprise visit-prep workflow. Configure only trusted search/MCP tools, use dedicated search API keys, avoid confidential non-public inputs, verify generated facts before customer use, and be cautious with optional persistent AGENTS.md setup or package installs.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Company names and related queries may be sent to the configured search or fetch provider.

Why it was flagged

The skill relies on external search/fetch tooling, including an optional shell-based fallback, but it is directly tied to the stated purpose and includes a search limit.

Skill content
This skill requires a **web search capability** ... **WebFetch + Shell**: Fallback to fetching web pages via HTTP requests ... no more than 8 searches
Recommendation

Use a trusted search provider, keep the search scope limited to the intended company, and avoid entering confidential non-public information.

What this means

A search API key may be used by the external MCP search service.

Why it was flagged

The recommended search integration may require an API key, while the skill metadata lists no primary credential; this is purpose-aligned but worth user attention.

Skill content
@anthropic/mcp-web-search ... Official, requires API Key
Recommendation

Use a dedicated, scoped search API key and do not reuse broad or unrelated account credentials.

What this means

Installing optional tools can add third-party code to the user environment.

Why it was flagged

The README includes optional user-directed installation of external packages; no automatic install is shown, but package provenance and versioning are user responsibilities.

Skill content
`claude mcp add web-search -- npx @anthropic/mcp-web-search` ... `pip install python-docx`
Recommendation

Verify package names and publishers, consider pinning versions, and install optional dependencies only when needed.

What this means

The skill's instructions may remain active for later tasks if added to AGENTS.md.

Why it was flagged

The Codex CLI adaptation suggests appending the skill instructions to a persistent project instruction file, which can affect future agent sessions in that project.

Skill content
cat telecom-visit-prep/SKILL.md >> AGENTS.md
Recommendation

Use this adaptation only in an appropriate project context and remove the appended instructions when no longer needed.

What this means

Recipients may not realize the report was AI-assisted unless the user discloses it separately.

Why it was flagged

The report template asks for output without AI-generation traces; this can be a normal professional style request, but it may be misleading if the report is shared where AI assistance should be disclosed.

Skill content
报告中不出现AI生成痕迹,以客户经理自己调研准备的风格呈现
Recommendation

Review and fact-check generated reports, and disclose AI assistance where policy, law, or customer expectations require it.