中文办公自动化

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only Chinese office automation skill with no code or credential use shown, though its Python dependencies and referenced helper scripts should be checked before use.

This skill appears benign and purpose-aligned, but it is mostly documentation. Before installing or using it, verify any Python packages and helper scripts, and do not rely on the claimed holiday-data auto-update unless the actual implementation and data source are provided.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing unpinned packages can introduce dependency risk if the package source or version is not what the user expects.

Why it was flagged

The skill instructs users to install unpinned Python packages. These packages are relevant to lunar dates, pinyin, and simplified/traditional conversion, but users should still trust the package source and versions before installation.

Skill content
pip install zhdate pypinyin opencc
Recommendation

Install dependencies from trusted package indexes, consider pinning versions, and review package provenance if using this in a sensitive environment.

What this means

The example commands may not work as supplied, and users should avoid running similarly named local scripts unless they know where they came from.

Why it was flagged

The usage examples reference helper scripts, but the provided file manifest contains only SKILL.md and package.json. This looks like an incomplete or documentation-only package rather than direct malicious behavior.

Skill content
python3 scripts/workday_check.py "2026-03-16"
Recommendation

Verify that any helper scripts are included from the same trusted source and review them before running Python commands.

What this means

Users may incorrectly assume holiday calculations are complete or automatically maintained.

Why it was flagged

The skill claims included holiday data and automatic updates, but no data file or update mechanism is present in the supplied artifacts. This is a functionality/trust note, not evidence of malicious behavior.

Skill content
包含2010-2030年中国法定节假日及调休安排,自动更新。
Recommendation

Confirm the holiday data source and update process before relying on it for business scheduling or reporting.