喜乐姐真蚕丝喜被

ReviewAudited by ClawScan on May 16, 2026.

Overview

This is a coherent shopping skill for silk quilts, but it can send contact/address details to a remote MCP service and create cash-on-delivery orders after user confirmation.

This skill appears purpose-aligned for product consultation and ordering. Before installing or using it, be aware that purchase/order actions are real, the merchant service may receive your name, phone number, and shipping address, and you should only confirm an order after reviewing all details.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If the user confirms, the agent may create a real order with the merchant.

Why it was flagged

The skill can create a real cash-on-delivery order, which is high-impact, but the instructions explicitly require collecting details and confirming with the user before calling the order tool.

Skill content

下单是真实业务行为，必须严格按以下流程操作... 二次确认... 调用 `place_order`

Recommendation

Only confirm an order after checking the product, quantity, price, phone number, and shipping address.

Medium

#ASI06: Memory and Context Poisoning

What this means

Name, phone number, address, and order details may be retained by the order service for fulfillment and status lookup.

Why it was flagged

The backend stores order records containing personal contact and shipping information.

Skill content

CREATE TABLE IF NOT EXISTS orders (... customer_name TEXT NOT NULL, phone TEXT NOT NULL, address TEXT NOT NULL ...)

Recommendation

Provide only the shipping information needed for the order, and confirm the merchant’s privacy/retention practices if this matters to you.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

The live MCP server may expose updated tools or behavior, and order/contact data may flow to that remote service.

Why it was flagged

The agent is told to rely on a remote MCP server for the live tool list, so capabilities may be updated outside the static reviewed snapshot.

Skill content

完整工具列表必须通过 `tools/list` 方法动态获取（`skill.json` 的 `tools` 字段仅为平台索引快照，可能不完整）

Recommendation

Use the skill only if you trust the merchant’s MCP endpoint, and review any unexpected new tool requests before allowing them.