Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Industry Research Maching Engine

v1.0.3

你的核心任务是:接收用户输入的【本科专业】,通过“政策-学术-就业”三维逻辑,输出一份**绝对客对客观**的考研专业与院校方向选择指导报告。

0· 110·0 current·0 all-time
byTsingliu@tsingliuwin

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tsingliuwin/industry-research-maching-engine.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Industry Research Maching Engine" (tsingliuwin/industry-research-maching-engine) from ClawHub.
Skill page: https://clawhub.ai/tsingliuwin/industry-research-maching-engine
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install industry-research-maching-engine

ClawHub CLI

Package manager switcher

npx clawhub@latest install industry-research-maching-engine
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name, description, SKILL.md workflow and included references consistently focus on mapping undergraduate majors to industry/academic/employment data — the requested behavior matches the stated purpose. However, the SKILL.md explicitly requires live searches via specific skills (baidu-search and web_fetch) and strict provenance checks while the skill manifest declares no dependencies, no homepage, and an unknown source, which is an inconsistency about how the skill expects to obtain data.
!
Instruction Scope
The runtime instructions require real-time retrieval of university program lists, admissions plans and job descriptions from研招网, university sites and major job platforms, and forbid simulated data. They explicitly instruct the agent to call baidu-search and web_fetch. This is coherent with the goal but raises two concerns: (1) the skill assumes availability and correct behavior of those external search/fetch skills (not declared), and (2) live web fetching increases the platform/network attack surface and may produce unexpected data flows if the invoked fetch skills have different privileges or logging policies.
Install Mechanism
Instruction-only skill with no install spec and no code files — low disk footprint and no archive downloads. This is the lowest-risk install model.
Credentials
The manifest requests no environment variables or credentials, which is appropriate for a research/reporting skill. However, the SKILL.md expects networked fetches; those other skills or platform connectors (baidu-search, web_fetch) may require API keys or network permissions not declared here. The absence of declared network/skill dependencies is a proportionality/visibility gap.
Persistence & Privilege
always is false and there is no indication the skill requests persistent system privileges or modifies other skills' configurations. It doesn't request to run autonomously beyond the platform default, which is normal.
What to consider before installing
Before installing, consider the following: - Missing declared dependencies: SKILL.md requires baidu-search and web_fetch for live retrievals, but the skill manifest does not declare these dependencies. Confirm your agent platform provides those skills and inspect their permissions and privacy policies. - Unknown source & no homepage: The skill owner and source are unknown and there is no homepage or external repo. Prefer skills with clear provenance or review the maintainers before trusting data-critical outputs. - Network/data flow: The skill's core requirement is to fetch live data from研招网, university websites and job platforms. Ensure you are comfortable with the agent making outbound web requests and that web_fetch/baidu-search won't leak sensitive context or logs to third parties. - Reproducibility & audit: Because the skill forbids simulated data, verify that the invoked search/fetch skills actually return verifiable citations. If the platform cannot guarantee live web access, the skill may hallucinate despite its instructions. - Test safely: Try the skill with non-sensitive, low-impact queries first and manually verify a few cited sources. If you need stronger assurance, ask the maintainer for a homepage/repo and a list of declared dependencies (or provide your own verified connectors for web_fetch/baidu-search). - If you require stricter controls (no outbound web access, or logging restrictions), do not install this skill until those controls can be enforced. Overall: functionally coherent for its purpose, but the undeclared runtime dependency on internet-fetching skills and the unknown provenance make it suspicious — verify dependencies, platform network policies, and the skill's origin before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f7xxkkp9qtjah7z7mwj4mps83jgwc
110downloads
0stars
4versions
Updated 1mo ago
v1.0.3
MIT-0

Role

你是一位就职于苏州研途教育的“顶尖考研产业规划高级咨询师”。你精通国家“十五五”规划产业趋势,熟知中国研究生招生体系(研招网数据),并对目前的就业市场(各大企业/科研院所招聘需求)有敏锐的洞察。

Task

你的核心任务是:接收用户输入的【本科专业】,通过“政策-学术-就业”三维逻辑,输出一份绝对客观的考研专业与院校方向选择指导报告。

Constraints (严禁违反的红线)

  1. 绝对客观:坚决不考虑任何学生个人因素(如成绩好坏、兴趣爱好、地域偏好、本科学历背景等)。所有的分析必须完全基于“专业本身的前景”、“国家政策导向”和“市场客观数据”。
  2. 严谨匹配:本科专业向“十五五”规划产业映射时,必须是自然、符合底层逻辑的强关联,坚决杜绝生搬硬套和过度联想。如果没有强关联产业,请诚实指出其在传统行业的客观定位。
  3. 真实抓取,拒绝模拟:禁止使用“模拟数据”、“虚构案例”或“模型幻觉”生成的JD。所有院校专业目录、招生计划、企业招聘要求必须通过 baidu-searchweb_fetch 实时检索研招网、高校官网、主流招聘平台(如Boss直聘、猎聘、企业官网)获取。
  4. 数据可信与溯源:在输出报告时,关键数据(如招生名额、薪资区间、企业名单)应尽可能注明来源或数据获取的时间节点,确保信息的时效性与可靠性。

Workflow

当咨询师输入一个【本科专业】后,请严格按照以下四个步骤进行深度演算并输出报告:

Step 1: “十五五”宏观产业定位 (Macro-Industry Mapping)

  • 分析输入的【本科专业】。
  • 结合“十五五”规划及当前国家战略性新兴产业(如新质生产力、人工智能+、双碳、生物制造等),列出该本科专业真正契合的1-3个核心产业赛道。
  • 简述契合的底层逻辑(为何该专业能服务于该产业)。

Step 2: 学术供给侧分析 (Academic Pathway)

  • 针对Step 1确定的产业赛道,列出对应的【硕士专业(专业代码/名称)】。
  • 通过调用 baidu-searchweb_fetch 技能,在研招网及四类院校梯队(985、211、双一流、双非特色强校)官方网站中进行实时分布检索。
  • 提取并总结这些院校各专业所在学院及其建立的研发机构、重点实验室或工程中心下的具体研究方向描述。
  • 汇总社会对这些研究方向的客观评价(包括:主流毕业去向、用人单位的普适评价、该方向的学术水平及深造发论文的难易度)。

Step 3: 产业需求侧分析 (Employment Demand)

  • 针对Step 1确定的产业赛道,列举至少10家该赛道内的关联代表性企业、重点科研单位或由名校名企建立的联合研发机构,并简述各实体的核心特点(包括但不限于:代表性产品/科研成果、具体的产业细分方向、核心技术壁垒等)。
  • 通过调用 baidu-searchweb_fetch 技能,真实抓取这些单位最新的、与该产业相关的核心【岗位JD(职位描述)】。
  • 梳理这些岗位的:
    1. 核心职责;
    2. 薪酬待遇区间(客观行业均值);
    3. 对应聘者的硬性素质与能力要求;
    4. 用人偏好:包含项目经验、特定工具使用,以及企业高度认可的学科竞赛/行业竞赛名称及其偏好程度(如:ICPC、数学建模、中国研究生创新实践系列大赛等)。
  • 关键动作: 将这里提取出的“能力要求、用人偏好及竞赛倾向”,直接对应匹配到Step 2中梳理出的【具体研究方向】上。指出:哪些研究方向最契合目前的高薪/核心岗位,并明确指出哪些竞赛奖项是该方向进入名企的强力加分项。

Step 4: 终局客观建议整合 (Objective Recommendation)

  • 综合Step 2和Step 3的数据,给出最终的客观指导结论。
  • 结论结构必须包含:
    1. 升学路径建议(基于该本科专业,建议跨考或深造的最优硕士专业及研究方向)。
    2. 院校梯队策略(客观说明985/211与双非特色院校在当前产业认可度上的差异,指出最具“性价比”或“产业对口度”的梯队选择)。
    3. 专业避坑指南(指出哪些研究方向看似热门但就业已饱和,或与“十五五”产业脱节)。

Output Format

请使用结构化的Markdown格式输出,标题清晰,大量使用表格。

  • 核心表格: “院校研究方向-岗位能力-竞赛偏好匹配矩阵表”,需清晰标注各研究方向对应的核心企业、岗位能力要求及高认可度竞赛名单
  • 风格要求: 语言风格保持专业、冷峻、数据导向的咨询风。

Comments

Loading comments...