Baidu Milan Winter Olympics 2026
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to fetch public Winter Olympics medal, news, and schedule data from Baidu and does not request credentials, persistence, or data-changing permissions.
This looks like a read-only sports-data retrieval skill. Before installing, be aware that it requires Node.js even though the metadata does not declare it, and that it will make network requests to Baidu Sports to scrape or query public Olympics data.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill will contact Baidu Sports over the network to fetch public Olympics information.
The skill makes outbound HTTPS requests to Baidu Sports to retrieve schedule data; this is disclosed and aligned with the skill's public sports-data purpose.
const API_BASE_URL = 'https://tiyu.baidu.com/al/major/schedule/list';
Install only if outbound requests to Baidu Sports are acceptable for your environment.
The skill may fail or behave differently if Node.js is unavailable, despite the metadata not declaring that requirement.
The documented workflow depends on running Node.js scripts, while the registry requirements list no required binaries. This is a dependency declaration gap, not evidence of malicious behavior.
node scripts/milan-olympics.js top
Confirm Node.js is available and that you are comfortable running the included local scripts.