junior-high-math-research-plans

PassAudited by ClawScan on May 1, 2026.

Overview

该技能主要是初中数学教学资源和计划生成工具,未发现窃取数据、隐藏联网或破坏性行为,但安装前应留意其较宽的本地权限和来源信息不够完整。

This appears suitable for its stated educational purpose. Before installing, check that you trust the publisher, are comfortable with the package’s broad read/write/exec permission declaration, and do not depend on the helper features whose files are not included.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the platform honors these permissions, the skill may be granted broader local file and execution capability than the basic lesson-plan/resource lookup use case requires.

Why it was flagged

The package declares broad read/write/exec permissions, while the shown teaching-resource code does not include shell spawning or network behavior. This is not misuse by itself, but users should notice the broad authority.

Skill content
"openclaw": { "skill": true, ... "permissions": ["read", "write", "exec"] }
Recommendation

Install only if you are comfortable with those local permissions; the maintainer should narrow permissions or clearly document why exec access is needed.

What this means

Users have less assurance about the exact dependency version or project source associated with the package.

Why it was flagged

The dependency is a version range rather than a pinned version, and the repository URL appears to be a placeholder. This weakens provenance clarity but does not show hidden download or execution behavior.

Skill content
"dependencies": { "openclaw": ">=1.0.0" } ... "url": "https://github.com/example/junior-high-math-research-plans"
Recommendation

Verify the publisher/source before installing; the maintainer should pin dependencies and provide a real repository or homepage.

What this means

Some advertised exercise-generation, progress-analysis, or template-filling features may not work as described.

Why it was flagged

The documentation references helper files/features that are not present in the provided manifest/source. This looks like a packaging or documentation mismatch, not hidden behavior.

Skill content
├── 练习题制作.js           # 题目生成功能 ... └── 教学进度分析.js         # 进度分析功能 ... └── 模板填充.js
Recommendation

Confirm the needed files are included before relying on those features; the maintainer should either add the files or update the documentation.