Docs Pipeline Automation

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill appears to generate local Docs pipeline specification files and does not request credentials, network access, or persistent permissions.

This looks safe for its stated purpose. Before installing, be aware that it can run a bundled Python script and write a local output file, so choose the output path carefully.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may run a local script and create or overwrite the output file path you provide.

Why it was flagged

The skill directs use of a local bundled Python helper. Local code execution is worth noticing, but here it is purpose-aligned and the included script only composes an output artifact from optional JSON input.

Skill content
Run `scripts/compose_docs_pipeline.py` for deterministic pipeline output.
Recommendation

Run it only with intended input and output paths, and avoid pointing the output at important existing files unless you mean to replace them.