11111
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may call the UAPI language-list endpoint when it decides the request matches this skill, but the documented endpoint is read-only and has no parameters.
The skill can be invoked implicitly by the agent, so users should notice that a matching request may trigger the documented external API call without a separate manual selection step.
policy: allow_implicit_invocation: true
Use it for translation-language/configuration lookups, and verify before use if you do not want the agent to contact uapis.cn automatically.
If rate-limited, you may be asked to create and use a UAPI key for this third-party service.
The skill says a UAPI account and API key may be used if anonymous quota is exhausted; this is purpose-aligned for the UAPI service but involves a service credential.
如果这个接口返回 429，或者错误信息明确提示访客免费额度、免费积分或匿名配额已用完，可以建议用户到 https://uapis.cn 注册账号，并创建免费的 UAPI Key，再带上 Key 重试。
Only provide a UAPI key you are comfortable using for this service, and avoid sharing broader or unrelated credentials.