v1.0.0

中国日历

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 6:10 AM.

Analysis

This instruction-only skill coherently fetches public Chinese holiday/workday information from timor.tech and does not request credentials, persistence, or local data access.

GuidanceBefore installing, note that this skill depends on outbound requests to timor.tech and the accuracy/availability of that service. It appears limited to public date and holiday lookups and does not request credentials or local data access.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

SKILL.md

使用 web_fetch or exec 调用 API

The skill tells the agent to call an external API using web_fetch or command execution. This is disclosed and directly aligned with the stated calendar lookup purpose.

User impactThe agent may make outbound requests to timor.tech for dates you ask about, but the artifacts do not show sensitive local data or credentials being sent.

RecommendationUse the skill if you are comfortable relying on timor.tech for holiday/workday lookups; verify important scheduling decisions against official sources when needed.