Math Slop

• Risk level: Low
• Analyzed: May 1, 2026, 5:24 AM
• Findings: 1
• Version: 0.3.1

Overview

This skill coherently generates satirical LaTeX math formulas and the included script shows no credential, network, file, or persistence behavior.

This appears safe for generating math meme formulas. Before installing, note that it expects Node.js to run even though the registry metadata does not list Node as a requirement.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Info

What this means

The skill may not run unless Node.js is already available, but the provided code does not show unsafe install or runtime behavior.

Why it was flagged

The skill's usage depends on Node.js even though the registry requirements declare no required binaries; this is a disclosed, purpose-aligned local execution step but under-declared in metadata.

Skill content

node scripts/generate-slop.js

Recommendation

Installers or maintainers should declare Node.js as a required binary so users understand the runtime requirement.