Emoji Wrapper

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it advertises—expand bracketed emoji markers locally—but users should notice that it reads incoming messages, imports a separate local emoji skill, and uses per-user emoji state.

This looks like a straightforward local emoji wrapper. Before installing, make sure you trust the separate local-auto-emoji skill, and be comfortable with this wrapper reading message text for bracketed markers and using local per-user emoji state.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Messages containing bracketed emoji markers may trigger extra text or image messages without a separate confirmation step.

Why it was flagged

The skill is explicitly designed to inspect messages and automatically transform marker text into media outputs. This is aligned with its purpose, but it affects all message content it processes.

Skill content
- Intercepts all incoming messages
- Detects `[标记]` patterns ...
- Replaces them with actual emoji images (MEDIA instructions)
Recommendation

Install only if you want this automatic emoji expansion behavior, and disable it if you do not want incoming messages scanned for markers.

What this means

If the local-auto-emoji skill is missing, untrusted, or modified, this wrapper's behavior can change or fail.

Why it was flagged

The wrapper imports and runs code from a separate local-auto-emoji skill located in the workspace. The dependency is disclosed, but its behavior depends on that separate local code.

Skill content
LOCAL_EMOJI_PATH = _workspace_root / "skills" / "local-auto-emoji" / "scripts"
...
sys.path.insert(0, str(LOCAL_EMOJI_PATH))
...
from send_emoji import LocalAutoEmoji
Recommendation

Review and install local-auto-emoji from a trusted source before enabling this wrapper.

What this means

The skill may create or reuse a local emoji profile associated with a user or channel identifier.

Why it was flagged

The wrapper uses the session/user ID to create or select a user entry in the local emoji system, so emoji behavior may depend on per-user local state.

Skill content
if userid not in self.bot.manager.index["users"]:
    self.bot.ensure_user(userid)
self.bot.userid = userid
Recommendation

Understand where local-auto-emoji stores user emoji packs or indexes, and remove that local state if you no longer want per-user emoji behavior.