Back to skill
Skillv1.0.0
ClawScan security
techflow-news · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 10, 2026, 4:43 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only scraper that coherently describes scraping TechFlow's Chinese front page for today's articles and summarizing them; it requests no credentials or installs and its instructions align with its stated purpose.
- Guidance
- This skill is instruction-only and appears coherent for its purpose, but keep in mind: it will fetch content from the public TechFlow site when invoked — verify you are comfortable with the agent making outbound web requests. There are no credentials requested, but the SKILL.md depends on an external scraping tool ('extract_content_from_websites') which must exist in your agent environment; if that tool is not present the agent may fall back to other network methods. Before installing, confirm the agent's web-scraping tool respects robots.txt and rate limits and that you accept fetching and summarizing third‑party site content. Because there is no code to review, you cannot inspect implementation details; if you need stricter controls, only enable skills that declare their tooling or provide code you can audit.
Review Dimensions
- Purpose & Capability
- okName/description state: aggregate today's TechFlow (zh-CN) articles into a table and produce a short summary. The SKILL.md only requires fetching that specific URL and extracting title, date, summary, and link — all consistent with the declared purpose.
- Instruction Scope
- noteInstructions are narrowly scoped to scraping https://www.techflowpost.com/?lang=zh-CN, extracting title/date/summary/link, filtering articles published today, and distinguishing article types. The doc references an external tool 'extract_content_from_websites' (not declared in metadata) and expects date parsing and URL normalization; behavior depends on the agent's available web-scraping tooling and time-zone handling. No instructions ask for unrelated files, credentials, or broad system data.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill. This minimizes disk writes and external installs. Runtime will rely on the agent's existing web access/tools.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. That is proportionate to a simple web-scraping/news-aggregation task.
- Persistence & Privilege
- okalways:false and no special privileges requested. The skill does not ask to modify other skills or persist credentials.