642件可写的小事
AdvisoryAudited by Static analysis on May 7, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing and invoking the skill may create or overwrite an HTML file in the workspace or another path the user provides.
The skill directs the agent to write an output file, including to a user-specified path. This is expected for an app generator, but it is still a workspace mutation.
默认输出到当前工作区的 `data/642-things-to-write.html`。若用户指定路径则使用用户路径。
Use a safe output path and avoid pointing the skill at important existing files unless you intend to replace them.
Opening the generated HTML file will run the generated browser code for the writing app.
The generated artifact is a runnable HTML/JavaScript application. That is central to the skill's stated purpose and no hidden execution mechanism is shown.
单文件 H5 应用（`642-things-to-write.html`），零外部依赖，可直接在浏览器运行。
Keep the generated file local unless you choose to share it, and review the file if you need assurance about its browser behavior.
Personal drafts or creative writing entered into the app may remain available in the generated app's saved works area.
The app specification includes saving writing and showing a works collection, indicating user-authored content may be retained by the generated app.
写作面板（Write Panel）... 保存按钮 ... 作品集 ... 作品列表 / 空状态
Avoid entering sensitive writing unless you are comfortable with how the generated app stores it, and use the app's delete controls or remove the local file if needed.