Back to skill
Skillv1.0.0
ClawScan security
jackyshen-write-wechat-article · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 4:04 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only WeChat article writer whose required actions and resources match its description and request no credentials or installs.
- Guidance
- This skill is instruction-only and coherent with its stated purpose. Before installing: 1) Confirm you are comfortable with generated content style (it asks to avoid 'AI-sounding' phrasing and to include emojis and CTAs). 2) Verify the cross-reference to 'jackyshen-list-methods**' if you expect automatic invocation of another skill; the reference looks malformed and may be just a documentation note. 3) As with any content generator, review outputs for accuracy, privacy, and platform policy compliance before publishing (don’t include private or sensitive data).
Review Dimensions
- Purpose & Capability
- okName, description, and SKILL.md all focus on producing WeChat Official Account articles in Markdown and provide templates, structure, and style guidance. There are no unexpected dependencies, binaries, or credential requests that would be disproportionate to that purpose.
- Instruction Scope
- okRuntime instructions are limited to writing guidance, formatting rules, hooks, and output examples. The SKILL.md does not instruct the agent to read local files, access environment variables, call external endpoints, or transmit user data. One minor note: it references another skill ('jackyshen-list-methods**') — this is a content cross-reference, not an instruction to access unrelated secrets or systems.
- Install Mechanism
- okNo install spec and no code files — instruction-only. This is the lowest-risk install profile because nothing is downloaded or written to disk.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The instructions do not request any secrets or system credentials.
- Persistence & Privilege
- okSkill flags are default (not always: true). It does not request permanent presence or elevated privileges and does not modify other skills or system-wide agent settings.