Bu Bu Wei Ying 1.0.0

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent development-process checklist that may guide local build, package, and restart commands, but it shows no hidden code, credential use, or deceptive behavior.

This skill appears safe as an instruction-only development checklist. Before using it, remember that it may lead the agent to suggest or run local build, packaging, restart, release, or rollback steps; keep those actions scoped to the intended workspace and approve high-impact operations yourself.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI05: Unexpected Code Execution

What this means

If the agent follows this workflow during a coding task, it may run local project build scripts, rewrite packaged app files, or restart the application.

Why it was flagged

These examples direct local build, packaging, and restart activity. Running npm/npx commands can execute project-controlled scripts and modify build artifacts, but this is explicitly documented and aligned with the skill's app-development purpose.

Skill content

npm run build:renderer
npx asar pack dist resources/app.asar
完全退出后重新启动

Recommendation

Use it in the intended project workspace and confirm before running build, package, restart, deployment, or rollback steps, especially on production or shared systems.