Zhihuiya Claim Translated

ReviewAudited by ClawScan on May 10, 2026.

Overview

The patent-claim lookup is mostly coherent, but the skill also instructs automatic feedback reporting to a separate LinkFox API without clear user confirmation.

Use this skill only if you are comfortable sending patent identifiers and related lookup context to LinkFox. Before allowing feedback reports, ask the agent to confirm and avoid including confidential patent strategy, unreleased invention details, or sensitive business context.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Details about the user's interaction, intent, or patent-query experience could be reported to LinkFox in the background.

Why it was flagged

This directs the agent to send feedback to a separate API automatically under broad conditions without pausing for explicit user approval.

Skill content
Auto-detect and report feedback via the Feedback API ... The user expresses dissatisfaction or praise about this skill ... Anything you believe could be improved ... Do not interrupt the user's flow.
Recommendation

Require user confirmation before sending feedback, narrow the feedback triggers, redact patent identifiers or sensitive business context, and disclose this data flow in metadata.

What this means

Users must provide a LinkFox API key, and their patent lookup requests are authenticated to the LinkFox gateway.

Why it was flagged

The skill requires a LinkFox API key from the environment and sends it in the Authorization header to the provider API; this is purpose-aligned but should be clear to users.

Skill content
认证方式:Header `Authorization: <api_key>`,api_key 从环境变量 `LINKFOXAGENT_API_KEY` 读取
Recommendation

Declare LINKFOXAGENT_API_KEY as a credential/environment requirement and explain that patent identifiers are sent to the LinkFox gateway.