Company Profiling Zhcn

AdvisoryAudited by Static analysis on May 13, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your PatSnap API key may be stored in Claude Code MCP configuration and used for PatSnap data requests.

Why it was flagged

The skill requires a PatSnap API key for the remote MCP service. This is aligned with the stated PatSnap data-integration purpose, but the key grants account access and should be protected.

Skill content
登录 https://open.patsnap.com ,进入 **API Keys**,创建一个新 Key。 ... "https://connect.patsnap.com/096456/logic-mcp?apiKey=sk-xxxxxxxxxxxx"
Recommendation

Use a dedicated, revocable API key with the minimum permissions available, do not share the configured URL, and revoke the key if you stop using the skill.

What this means

Company names, research topics, and generated MCP queries may be processed by the PatSnap MCP service.

Why it was flagged

The skill relies on a remote MCP server operated through the PatSnap endpoint. User company queries and related research requests may be sent to that provider as part of normal operation.

Skill content
claude mcp add --transport http pharma_intelligence "https://connect.patsnap.com/096456/logic-mcp?apiKey=sk-xxxxxxxxxxxx"
Recommendation

Install only if you trust the PatSnap endpoint and are comfortable sending relevant research queries to that service.

What this means

Using the skill may trigger a small PatSnap MCP request even before the main company question is answered.

Why it was flagged

The skill tells the agent to make a PatSnap MCP connectivity-check call before handling user queries. The check is limited and purpose-aligned, but it is an automatic external tool call.

Skill content
每次技能加载后、处理任何用户查询之前,必须先执行以下自检。 ... 使用 `ls_target_fetch` 按名称查询 EGFR
Recommendation

Be aware of possible API usage or logging by the provider; confirm the MCP service is connected only when you intend to use this skill.