show sysinfo

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may execute common local inspection commands to gather host details when the user asks for a system report.

Why it was flagged

The skill instructs the agent to run local system commands. These commands are fixed and read-only, and they are central to the stated system-information purpose.

Skill content
1. 依次运行上述命令
Recommendation

Use the skill when you intentionally want a local system report, and review the report before sharing it outside your environment.

What this means

Generated reports may expose local usernames, home directories, shells, and logged-in user information.

Why it was flagged

The report may include currently logged-in users and local account metadata from /etc/passwd. This is disclosed and purpose-aligned for system inspection, but it can reveal user/account details.

Skill content
| 登录用户 | `who` | ... | 用户信息 | cat /etc/passwd |
Recommendation

Avoid posting generated reports publicly or sending them to untrusted parties unless you have removed sensitive host and user details.