Check Workday CN

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill is narrowly scoped to checking Chinese workdays and only makes a disclosed public holiday-data request.

This appears safe for ordinary use. Be aware that it depends on a public third-party holiday dataset, so verify results separately if a workday decision has important financial, legal, or operational consequences.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the external holiday dataset changes incorrectly or is unavailable, the skill may give an incorrect workday answer.

Why it was flagged

The skill relies on a mutable external data source from the repository's master branch. This is disclosed and purpose-aligned, and the data is parsed as JSON rather than executed, but upstream changes could affect the returned workday result.

Skill content
API_TEMPLATE = "https://cdn.jsdelivr.net/gh/NateScarlet/holiday-cn@master/{year}.json"
Recommendation

For critical scheduling or business automation, verify important dates against an official source or consider pinning the data source to a known revision.