上海落户公示查询 (Shanghai Luohu)
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to fetch public Shanghai settlement notice pages from the official site and open them in a browser, with no evidence of credential access, data theft, persistence, or destructive behavior.
Before installing, be aware that this skill runs a bundled Python script, fetches public pages from sh-italent.com, and opens browser tabs by default. The reviewed artifacts look purpose-aligned and benign, but the source is unknown and the registry metadata does not fully declare the runtime behavior.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When invoked, the skill can run a local script and open browser pages on the user's machine.
The skill asks the agent to execute bundled local Python code. The source is provided and matches the public-notice lookup purpose, but users should know installation enables local script execution.
当触发此 skill 时，执行 skill 目录下的 `query_luohu.py` 脚本：python3 "${SKILL_DIR}/query_luohu.py"Install only if you are comfortable with this local execution model; use the documented `--no-browser` option if you do not want browser tabs opened.
Users have less registry-level context about who maintains the script and what runtime capabilities it needs.
The registry metadata provides limited provenance and under-declares runtime expectations relative to SKILL.md's Python/execute_command instructions. The included code is reviewable and does not show hidden behavior.
Source: unknown; Homepage: none; Required binaries: none; Capability signals: No capability tags were derived.
Review the bundled scripts before installation and treat the source/provenance as unverified.