demo-lin-test

收费技能示例模板 - 带授权验证，演示如何在 ClawHub 发布付费技能

Security Scan

The skill's description says it's a paid/auth demo, but the skill is an instruction-only document summarizer that requests no credentials or install — the claim about authorization is inconsistent with the actual instructions.

Purpose & Capability

The registry description advertises a 'paid skill with authorization' (演示带授权验证), but the SKILL.md simply defines a document-summary routine and the skill declares no required environment variables, credentials, binaries, or install steps. This mismatch could be benign (billing/auth handled by the platform) but is an unexplained inconsistency.

Instruction Scope

SKILL.md limits behavior to: read provided content and return a Markdown summary with specific sections (Summary, Key Points, Risks). It does not instruct reading other files, environment variables, or contacting external endpoints.

Install Mechanism

There is no install spec and no code files. As an instruction-only skill, it writes nothing to disk and has minimal runtime footprint.

Credentials

The skill declares no required environment variables or credentials, which is consistent with the instructions. However, the top-level description's mention of authorization is not reflected in the declared env/credential requirements — either the platform provides billing/auth externally (possible) or the metadata is inaccurate.

Persistence & Privilege

The skill does not request 'always:true' and uses default invocation settings. It does not ask to modify other skills or system settings.

What to consider before installing

This skill appears to be a simple, instruction-only document summarizer and does not request credentials or install anything. The main inconsistency is the metadata claiming a paid/auth demo while the skill itself has no auth behavior — that may be harmless if platform-level billing is intended, but could also indicate sloppy or misleading metadata. Before installing: (1) verify the publisher identity (owner ID) and prefer skills with a homepage or repository; (2) ask the publisher why the description mentions authorization if the skill needs no credentials; (3) avoid sending highly sensitive documents to a skill with unclear provenance; (4) monitor the skill's behavior when first used and revoke access if anything unexpected occurs. Additional information that would raise confidence: a homepage/repository, explicit explanation of billing/auth flow, or code/assets showing how authorization is handled.

document-summary

##skill头

name: demo-lin-test description: 将技术文档总结为结构化的标记。

说明

将技术文档总结为结构化的标记。

说明

当用户要求 林大大文档时，使用此技能 分析文本或提取关键点。

何时使用

-内容（字符串，必填） 要分析的文档文本。

行为学

你是一名专业技术分析师。

调用时：

1. 阅读提供的内容。
2. 生成Markdown格式的输出。
3. Structure output as:

摘要

（最多5行）

Key Points

• 项目符号列表

Risks

• 潜在风险或担忧

Output Format

仅返回有效的Markdown。