Skill Finder CN Pro
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a simple ClawHub skill search helper; the main caution is to inspect and approve any skill before installing it.
This skill appears safe for searching ClawHub. Before installing any recommended skill, inspect it, verify the exact slug/owner, and only proceed if you trust the additional skill's requested permissions.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing a recommended skill can change what the agent can do in future sessions.
The skill explicitly guides the agent/user to inspect and install other ClawHub skills. This is purpose-aligned for a skill finder, but installed skills may introduce their own permissions or code.
clawhub inspect <skill-name> ... clawhub install <skill-name>
Use `clawhub inspect` first and approve the exact skill name/source before running `clawhub install`.
Users may find it harder to verify whether the package identity exactly matches the registry listing.
The packaged `_meta.json` names `skill-finder-cn` with a different owner ID than the supplied registry metadata for `skill-finder-cn-pro`. This does not show malicious behavior, but it slightly weakens provenance clarity.
"ownerId": "kn71y3mdbcx5dyhwxv1t7sm82x81a168", "slug": "skill-finder-cn"
Confirm the registry slug and owner before trusting installation recommendations from this package.