Scan Report
5 /100
OrderKeeper
Post-purchase order and after-sales management skill for mainland China shopping and delivery scenarios
OrderKeeper is a pure documentation/guidance skill with no executable code, no shell access, no network I/O, and no sensitive file access—all declared capabilities are filesystem:READ (for reading SKILL.md and references) and network:READ (for fetching platform policies), which are appropriate for its stated purpose of post-purchase order management guidance.
Safe to install
No action needed. The skill is safe to use as-is.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md reads references/deadline-triage.md, support-script-frames.md, after-sa… |
| Network | READ | READ | ✓ Aligned | SKILL.md mentions fetching platform/seller policies for deadline windows |
| Shell | NONE | NONE | — | No shell commands declared or found |
| Environment | NONE | NONE | — | No environment variable access declared or found |
| Skill Invoke | NONE | NONE | — | No skill invocation patterns found |
| Clipboard | NONE | NONE | — | No clipboard access declared or found |
| Browser | NONE | NONE | — | No browser automation declared or found |
| Database | NONE | NONE | — | No database access declared or found |
File Tree
9 files · 23.8 KB · 752 lines Markdown 7f · 724L
JSON 1f · 24L
YAML 1f · 4L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
references
│ ├─
after-sales-cards.md
Markdown
│ ├─
deadline-triage.md
Markdown
│ └─
support-script-frames.md
Markdown
├─
CHANGELOG.md
Markdown
├─
clawhub.json
JSON
├─
README.md
Markdown
├─
RELEASE.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Skill is entirely documentation-based with no executable code
✓ All declared capabilities are appropriate and minimal for its purpose
✓ No credential harvesting, exfiltration, or sensitive file access
✓ No shell execution, obfuscation, or base64 payloads
✓ No supply chain dependencies to attack
✓ Clear and consistent documentation describing only post-purchase order guidance
✓ Content is human-readable plaintext with no hidden instructions
✓ No scripts, binaries, or dependency files present