v0.0.2

Baidu Milan Winter Olympics 2026

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:32 AM.

Analysis

The skill appears to fetch public Winter Olympics medal, news, and schedule data from Baidu and does not request credentials, persistence, or data-changing permissions.

GuidanceThis looks like a read-only sports-data retrieval skill. Before installing, be aware that it requires Node.js even though the metadata does not declare it, and that it will make network requests to Baidu Sports to scrape or query public Olympics data.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

scripts/milan-schedule.js

const API_BASE_URL = 'https://tiyu.baidu.com/al/major/schedule/list';

The skill makes outbound HTTPS requests to Baidu Sports to retrieve schedule data; this is disclosed and aligned with the skill's public sports-data purpose.

User impactUsing the skill will contact Baidu Sports over the network to fetch public Olympics information.

RecommendationInstall only if outbound requests to Baidu Sports are acceptable for your environment.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

SKILL.md

node scripts/milan-olympics.js top

The documented workflow depends on running Node.js scripts, while the registry requirements list no required binaries. This is a dependency declaration gap, not evidence of malicious behavior.

User impactThe skill may fail or behave differently if Node.js is unavailable, despite the metadata not declaring that requirement.

RecommendationConfirm Node.js is available and that you are comfortable running the included local scripts.