Generate Property Management Company Client Education Handout
ReviewAudited by ClawScan on May 10, 2026.
Overview
This looks like a simple handout-generation skill, but it requests broad local Bash/Read access and has inconsistent install-source references that should be reviewed before use.
Before installing, confirm you trust the publisher and install source, and consider disabling Bash and limiting file-read access unless you specifically need the skill to use local source documents.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked with these permissions, the agent may be able to read local files or run shell commands even though that is not clearly needed to create a handout.
The skill documents only chat and image-generation behavior for creating a handout, but also grants Bash and Read access without scoping when local files or shell commands should be used.
allowed-tools: Bash, Read ... APIs Used\n\n- `chat`\n- `image_generation`
Remove Bash access unless it is necessary, and limit Read access to explicit user-selected source files with clear confirmation.
A user following the README could install or inspect a different package/source than the one being evaluated here.
The README points to qiaomu-named install sources, while the supplied registry metadata identifies the evaluated slug as toby-generate-property-management-company-client-education-handout.
clawhub install qiaomu-generate-property-management-company-client-education-handout ... git clone https://github.com/qiaomucom/generate-property-management-company-client-education-handout.git
Verify the intended publisher and repository before installing, and update the README so its install commands match the registry package.