E

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only editing helper that can guide local file changes, but it shows no hidden code, credentials, network use, or background persistence.

This skill appears safe as an editing shortcut, but only use it when you intend to modify local files. Before bulk edits or restore commands, confirm the target path, keep backups or version control available, and review the resulting diff.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If used on the wrong file or directory, edits or restore commands could overwrite or discard local work.

Why it was flagged

The skill documents commands that can modify files or discard working-tree changes. This is aligned with an editing helper and is paired with backup, diff, and validation guidance, but it is still a user-visible capability to handle carefully.

Skill content

sed -i 's/foo/bar/g' file.txt ... git restore .              # 丢弃工作区所有修改

Recommendation

Use it on clearly specified files, make backups or rely on version control, review diffs before and after edits, and require explicit confirmation before bulk replacements or broad restore commands.