Skillv1.0.0

ClawScan security

Sougou Map · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 16, 2026, 9:21 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: An instruction-only Sogou Map assistant that provides migration and mapping guidance; it asks for no credentials, installs nothing, and its instructions stay within the stated mapping/consulting purpose.
Guidance: This skill is informational and low-risk: it requires no installs or credentials and only provides mapping/migration advice. If you plan to act on its guidance (e.g., call third-party map APIs), obtain API keys directly from the official providers and verify endpoints and rate limits. Also cross-check any technical migration steps (coordinate transforms, API parameter mappings) against official Tencent/AMap/Baidu documentation before applying them to production systems.

Purpose & Capability: okThe skill's name and description (Sogou Map assistant, route/POI/navigation/dev guidance) match the SKILL.md content. It does not request unrelated binaries, credentials, or config, so required capabilities are proportionate to its stated purpose.
Instruction Scope: okSKILL.md contains only guidance, migration notes, coordinate-system advice, and recommended alternative map providers. It does not instruct the agent to read files, access secrets, call external endpoints, or transmit user data beyond normal conversational responses.
Install Mechanism: okNo install spec and no code files — this is instruction-only. Nothing will be written to disk or downloaded during install.
Credentials: okNo environment variables, credentials, or config paths are required. The skill does not ask for API keys or other secrets in its metadata or instructions.
Persistence & Privilege: okDefault privileges (not always-enabled, agent invocation allowed) are used. The skill does not request elevated or persistent system privileges and does not modify other skills or system-wide settings.