ClawHub

China Contract Review

v1.0.0

中国合同审查工具。Use when user needs to review contracts, identify risks, check compliance, or get legal suggestions. Supports labor contracts, sales contracts, rent...

⭐ 0· 120·0 current·0 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Chinese contract review, risk identification, compliance suggestions) aligns with the content of SKILL.md. The skill does not request unrelated binaries, credentials, or config paths.
✓
Instruction Scope
Runtime instructions are limited to receiving a user-provided contract, analyzing clauses, citing laws, and producing recommendations/reports. The SKILL.md does not instruct the agent to read unrelated system files, access environment variables, or transmit data to external endpoints beyond normal model usage.
ℹ
Install Mechanism
This is instruction-only and has no install spec (low risk). The SKILL.md mentions a dependency string ("pip install python-docx") in its front-matter, but there is no formal install specification. That is not malicious but may mean .docx parsing won't work automatically in some environments — it's an implementation/integration gap rather than a security problem.
✓
Credentials
No environment variables, credentials, or config paths are requested. The absence of sensitive requirements is proportional to a contract-review tool.
✓
Persistence & Privilege
always is false and the skill is user-invocable (normal). It does not request persistent/system-wide privileges or modify other skills' configs.
Assessment
This skill appears coherent and low-risk as an instruction-only contract-review helper, but consider the following before installing or using it: - Privacy: You will likely provide full contract text (may contain PII or confidential business information). Understand where the text is sent (the agent/model provider) and whether you need to redact sensitive details or use a local model. - Dependency note: SKILL.md mentions "pip install python-docx" but there is no install step in the registry entry — .docx support may not be available out of the box. - Legal caution: The skill explicitly disclaims legal advice. Use it for initial review only and consult a licensed lawyer for important contracts. - Trust & provenance: Source/homepage are unknown (only an owner ID). If provenance matters, ask the publisher for more details or prefer skills from known maintainers. - Verify outputs: Check any cited law references independently (official legal databases) before relying on them. Overall, this skill is internally consistent (benign) but exercise standard confidentiality and verification precautions.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ffjhes3njxmw6bqnn1ph45s83rrak

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis

Comments