Caoliao Qrcode Markdown Content

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent and narrowly focused on fetching Markdown from a validated qr61.cn link, with no code, credentials, persistence, or local data access.

This skill appears safe for its narrow purpose. Before installing, understand that it will contact qr61.cn URLs and return whatever Markdown they provide; treat returned Markdown as untrusted content and avoid following any embedded instructions without review.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may retrieve content from a QR-code-hosted web page; that content should be treated as data, not as instructions to execute or follow.

Why it was flagged

The skill directs the agent to use a shell command to fetch remote content and follow redirects. This is disclosed and central to the skill's purpose, but users should recognize it makes an external network request and returns untrusted Markdown content.

Skill content
通过 Shell 工具使用 `curl` 获取内容 ... `curl -L -s "https://qr61.cn/oZwrwZ/q2wR1WE.md"`
Recommendation

Use only with intended qr61.cn links, keep the URL validation in place, and do not execute commands or obey instructions contained in the fetched Markdown unless the user separately approves them.