Skillv1.0.1

ClawScan security

我的测试节能 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 6, 2026, 6:12 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only translation skill whose files, runtime instructions, and resource needs align with its stated purpose and request no unrelated privileges or credentials.
Guidance: This skill appears internally consistent and safe in terms of requested privileges: it is an instruction-only translator that uses only its bundled style/terminology files and asks for no credentials or installs. Before installing, consider: (1) test it on non-sensitive example docs to verify the translation quality and that terminology matches your product/team conventions; (2) confirm license/ownership of the included reference materials if that matters for your organization; (3) remember that translations performed by an AI agent may still be sent to the model provider (so avoid uploading confidential content unless your environment/policy allows it). If you need the skill to use company-specific terminology, ensure the terminology file is updated or replaced with your controlled glossary.

Purpose & Capability: okName/description (Chinese↔English technical translation) match the actual contents: an instruction SKILL.md and local reference files (style guide, terminology, writing guidelines). There are no unrelated env vars, binaries, or external services requested.
Instruction Scope: okRuntime instructions are limited to translation workflows and to loading the included reference files (references/*.md). They do not instruct reading system files, calling external endpoints, or accessing credentials beyond the skill package.
Install Mechanism: okNo install spec and no code files — the skill is instruction-only. Nothing is downloaded or written to disk by an installer, which minimizes risk.
Credentials: okNo required environment variables, credentials, or config paths are declared or referenced. The included terminology/style references are local to the skill and justify the absence of external secrets.
Persistence & Privilege: okSkill flags are default (always:false, user-invocable:true). It does not request permanent presence or system-wide config changes and does not claim to modify other skills or agent settings.