只需要说的简单技能

PassAudited by ClawScan on May 1, 2026.

Overview

This is a text-only skill generator with no installed code or credentials, but users should review any generated skill code and not rely solely on its claimed safety checks.

This skill appears safe to install as an instruction-only skill generator. Before using any generated skill, inspect the generated files—especially executable logic—and perform an independent security review before publishing to ClawHub or running it in your environment.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A generated skill could later execute code if the user installs or runs it.

Why it was flagged

The skill may generate executable JavaScript for newly created skills. This is purpose-aligned, but generated code should be reviewed before use.

Skill content
`logic.js`(可选):自动生成的核心逻辑代码(如果需要执行操作)
Recommendation

Review generated logic.js and any other generated files before installing, sharing, or publishing the resulting skill.

What this means

Users may assume generated skills are safe or compliant without independent review.

Why it was flagged

The README claims automatic security/compliance checking, but the provided artifacts contain no scanner or enforcement mechanism. This is not malicious, but users should avoid over-trusting generated output.

Skill content
**合规检查**:自动检查安全风险,适配 ClawHub 上架规范
Recommendation

Treat the built-in safety claim as guidance only; run a separate review before publishing or installing generated skills.