Party Building Quarterly

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill appears purpose-aligned and low risk, but it relies on a separate summarize CLI that is not declared in the install metadata.

This looks safe for generating a public-source quarterly report. Before using it, make sure any separate summarize CLI it calls is installed from a trusted source, and verify cited links/content because the skill is designed to compile externally sourced political material.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the summarize CLI is missing or replaced with an untrusted implementation, the skill may fail or produce summaries through code that was not reviewed here.

Why it was flagged

The skill relies on a separate CLI tool, but the provided install metadata says there are no required binaries and no install spec. This is purpose-aligned, but users should know the extra tool is outside the reviewed artifacts.

Skill content

依赖：需要系统安装 `summarize` CLI 工具（skillhub: summarize-1.0.0），用于提取总结《求是》文章核心内容

Recommendation

Install the summarize CLI only from a trusted source, verify the intended version, and consider declaring this dependency in the skill metadata.