Resignation Letter

ReviewAudited by ClawScan on May 10, 2026.

Overview

Prompt-injection indicators were detected in the submitted artifacts (unicode-control-chars); human review is required before treating this skill as clean.

This skill looks appropriate for generating resignation-related templates locally. Before using it, remember that it runs included shell scripts and creates a small local data directory. When preparing handover material, document accounts and access responsibilities without including passwords, tokens, private keys, or other secrets. ClawScan detected prompt-injection indicators (unicode-control-chars), so this skill requires review even though the model response was benign.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may execute local scripts to generate the requested text templates.

Why it was flagged

The skill instructs use of included local shell scripts. This is disclosed and purpose-aligned for a template generator, but users should understand it runs local code.

Skill content
scripts/script.sh create <name company last_day>
Recommendation

Run only the documented commands, and install from a trusted source if using the bundled scripts.

What this means

A user might put passwords, tokens, or other sensitive login details into a handover document if they interpret this broadly.

Why it was flagged

The handover guidance suggests documenting system account/login information. This fits an offboarding workflow, but could lead users to include sensitive account details in generated handover material.

Skill content
账号权限:所有系统的登录信息
Recommendation

Use the handover template for account names, ownership, access-transfer steps, and permission-removal notes; do not include passwords, tokens, recovery codes, or private keys.