China Holidays
PassAudited by ClawScan on May 1, 2026.
Overview
The skill coherently looks up Chinese public holiday notices, with only disclosed local script, gov.cn network, and cache behavior to be aware of.
This appears safe for normal holiday lookups. Install if you are comfortable with a bundled Python script making gov.cn requests and caching public holiday notices locally; no credentials are requested.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When used, the agent may run a local command, contact gov.cn, and update local cached holiday data.
The skill instructs the agent to run a local Python helper that may make a network request and write a cache file. This is clearly disclosed and directly supports the holiday lookup purpose.
python scripts/fetch_holidays.py --year {年份} ... 缓存未命中：联网从政府网获取数据，并自动缓存到本地Use it for holiday queries as intended, and use forced refresh only when you actually want the cache updated from the network.
Users have less external provenance information for the bundled helper script, and the Python requirement may not be obvious from metadata alone.
The skill has bundled helper code but no upstream homepage/source and no declared Python runtime requirement. This is a provenance and metadata clarity note, not evidence of malicious behavior.
Source: unknown; Homepage: none ... Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Review the bundled script if provenance matters to you, and ensure Python is available before relying on the skill.