Tianshu Homework Split

PassAudited by VirusTotal on May 9, 2026.

Overview

Type: OpenClaw Skill Name: tianshu-homework-split Version: 1.0.0 The skill is a straightforward text-processing utility designed to convert homework assignments or syllabi into Markdown checklists. The Node.js script (scripts/split_hw.js) uses basic regex and string manipulation to identify tasks and contains no network calls, obfuscation, or attempts to access sensitive system files.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user or agent points it at a private file, parts of that file may appear in the local output.

Why it was flagged

The helper reads the file path provided via --file as UTF-8 text. This is expected for splitting assignment text, but the selected file's contents may be reflected in the generated checklist.

Skill content
const p = path.resolve(o.file); ... return fs.readFileSync(p, 'utf-8');
Recommendation

Use --file only with the intended homework or syllabus text, and check the path before running.

What this means

Users may need to verify the included script themselves and ensure Node is available locally.

Why it was flagged

The registry provides limited provenance and does not declare the Node runtime used by the documented workflow. The included files are small and dependency-free, so this is an install/provenance note rather than a concern.

Skill content
Source: unknown; Homepage: none ... Required binaries (all must exist): none ... No install spec
Recommendation

Review the included script if provenance matters to you, and install/use Node only from a trusted source.