Stainless Steel Sop

AdvisoryAudited by VirusTotal on Mar 26, 2026.

Overview

Type: OpenClaw Skill Name: stainless-steel-sop Version: 1.0.0 The skill bundle is a standard SOP (Standard Operating Procedure) generator for business travel planning within the stainless steel industry. The instructions in SKILL.md are focused on legitimate business tasks such as travel logistics, customer verification, and industry analysis using appropriate third-party APIs (12306, Amap, weather). No malicious patterns, data exfiltration attempts, or harmful prompt injection instructions were found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Customer names, addresses, travel dates, and contact details could be sent to outside services while generating the itinerary.

Why it was flagged

The skill discloses using external APIs/search and handling customer contact/address information as part of the SOP workflow, so customer and trip details may be shared with provider or dependent tools.

Skill content
“调用 12306 API…高德地图 API…网络搜索核实客户注册地址/经营地址…电话/邮箱/联系人”
Recommendation

Use only with customer and trip data you are allowed to share with those services, and review which provider skills or APIs the agent will call.

What this means

The quality and safety of generated SOPs may depend on external skills or APIs that are not included in this artifact set.

Why it was flagged

The SKILL.md references helper skills/providers even though the supplied package has no install spec or code; this is not suspicious by itself, but execution depends on separately trusted integrations.

Skill content
“依赖技能 - `12306` - 火车票查询; `amap` - 高德地图路径规划; `weather-forecast`; `jisu-enterprise`”
Recommendation

Before use, confirm that any dependent skills or API providers are trusted, correctly configured, and appropriate for the customer data being processed.