Generate Private K-12 School Client Education Handout
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only handout generator appears coherent and non-malicious, though it grants more local tool access than the writing task seems to need and its README points to a differently named install source.
This appears safe to use as a writing aid, but verify the install source before following README commands and do not allow Bash or file-reading access unless it is necessary for your specific handout.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used carelessly, the agent could read local files or run shell commands during a writing task, though no provided instruction tells it to do so.
The skill grants local shell and file-read tools even though the documented workflow is to draft an education handout and generate visuals. The artifacts do not instruct unsafe command execution, but the capability is broader than clearly needed.
allowed-tools: Bash, Read
Use the skill only for the stated drafting task and avoid letting it run shell commands or read unrelated local files unless you explicitly need that.
Following the README literally could lead a user to install from a different package or repository than the one represented by the registry entry under review.
The README install examples reference a qiaomu-named package/repository, while the registry metadata identifies the evaluated slug as toby-generate-private-k-12-school-client-education-handout. This is a provenance mismatch users should verify.
clawhub install qiaomu-generate-private-k-12-school-client-education-handout ... git clone https://github.com/qiaomucom/generate-private-k-12-school-client-education-handout.git
Install only from a trusted ClawHub entry or repository after confirming the slug, owner, and file contents match the skill you intend to use.