Tools Litiao

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may suggest or use tools beyond the saved stack when it thinks they fit the task.

Why it was flagged

This is broad tool-use guidance. It is aligned with the skill's purpose of adapting to a user's stack, but it could lead the agent to consider unfamiliar available tools unless the user sets boundaries.

Skill content
You can use ANY tool. Learn new ones instantly. This skill tracks user preferences, not your limits.
Recommendation

Keep this installed only if you want flexible tool suggestions, and require confirmation before using unfamiliar, costly, public-facing, or account-changing tools.

What this means

The skill's packaging identity may be confusing if you rely on owner or slug for trust decisions.

Why it was flagged

The bundled metadata differs from the registry metadata, which lists a different owner ID and the slug 'tools-litiao'. Because there is no code or install step, this is a provenance note rather than a behavior concern.

Skill content
"ownerId": "kn73vp5rarc3b14rc7wjcw8f8580t5d1", "slug": "tools"
Recommendation

Verify the publisher/source if provenance matters to you, especially before granting future versions more permissions.

What this means

Your tool preferences or project stack may be remembered and reused in later interactions.

Why it was flagged

The skill is intended to persist learned tool preferences by updating SKILL.md. This is core to the stated purpose, but persistent entries can influence future tasks and should not include sensitive or untrusted instruction-like text.

Skill content
Reference only — consult when deciding whether to update SKILL.md.
Recommendation

Review the Stack, Preferences, Open To, and Avoid sections periodically, and avoid storing secrets, private project details, or commands as preference entries.