Security audit
china-install-skills
Security checks for vulnerabilities and agentic risk
Overview
The skill mostly does what it says (search/download/install skills for mainland China) but contains inconsistent endpoint usage, mixed upstream metadata, and installs third-party ZIPs and a cron job — enough mismatches and persistence to warrant caution before installing.
This skill appears to be a functional installer but has several red flags you should consider before installing: (1) endpoint inconsistency — the README/SKILL.md mention using a Convex deployment to 'bypass limits' but some scripts call clawhub.com while others call wry-manatee-359.convex.site; verify which domain is authoritative and whether that convex.site instance is trusted/official; (2) it downloads and unzips third‑party ZIPs directly into your agents' skills directories with only weak checks—inspect ZIPs before installing (unzip to a sandbox, review scripts, check _meta.json, verify maintainer); (3) it optionally installs a weekly cron job which will run in your user context — be cautious about enabling auto-update until you trust the upstream; (4) metadata and repository ownership fields are inconsistent (different usernames/hosts), which could indicate copy-paste or republishing under another owner — prefer code from a well-known, signed source. Recommended precautions: run the scripts in a disposable environment first, review any downloaded ZIP contents before copying into your real workspace, do not enable setup-cron.sh until you audit auto-update behavior, and confirm the convex.site host is an official ClawHub/Convex endpoint or otherwise trusted. If you want higher confidence, ask the publisher to explain the convex endpoint and provide signed release artifacts or a canonical repository/owner.
Static analysis
No suspicious patterns detected.