Chinese Chess
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill is purpose-aligned for creating or improving a Chinese chess game, but it depends on unreviewed local source folders outside the package.
This skill appears benign for generating or improving a Chinese chess game, but it will use files from hard-coded local folders under /Users/root009/projects/demos. Confirm those folders exist, are trusted, and contain only the intended template code before asking the agent to apply them to your project.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The generated game may be based on local files whose contents and provenance are unknown to the registry review.
The skill relies on local source directories outside the reviewed skill package, so the actual code that would be copied into a user project was not available for review.
Use source code from `/Users/root009/projects/demos/g1/game2` ... Use source code from `/Users/root009/projects/demos/g2/game2`
Before using the skill, inspect the referenced source directories and confirm they contain only intended Chinese chess game code.
Files in the referenced source directory will be loaded into the agent context and may influence generated or modified project files.
The skill instructs the agent to read every file under the selected local source directory and then create or modify project files. This is purpose-aligned, but it should be done only after confirming the directory contents are appropriate.
Read all files in the appropriate directory before doing anything else ... Use `Glob` to list files, then `Read` to read each one.
Use the skill only with trusted template directories, and ask the agent to summarize planned file changes before applying them if working in an important project.