Dependency Map Builder

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a purpose-aligned dependency-mapping helper that produces reviewable text output and does not show evidence of external system modification, credential use, or network activity.

This looks safe for generating dependency maps from materials you provide. Before installing or using it, remember that the optional Python helper can read the input path and write an output file, so avoid feeding it unrelated sensitive files and review any generated report before sharing or acting on it.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent may run a local Python script to process a user-selected input and generate an output file.

Why it was flagged

The skill allows optional local execution of its bundled Python helper. This is disclosed and purpose-aligned, but users should notice that it involves running local code with chosen input and output paths.

Skill content
如运行环境允许 shell / exec,可使用:`python3 "{baseDir}/scripts/run.py" --input <输入文件> --output <输出文件>`
Recommendation

Use input files you intend to process, choose a safe output path, and prefer stdout or dry-run style review when unsure.

What this means

The script can read local material selected as input and can write a report file if an output path is supplied.

Why it was flagged

The documented helper accepts local input and output paths. This is expected for a report-generation skill, and the presence of stdout and dry-run options provides a safer review-oriented workflow.

Skill content
`--input   输入文件或目录` / `--output  输出文件,默认 stdout` / `--dry-run 仅分析不写文件`
Recommendation

Review file paths before running the helper, avoid passing sensitive unrelated directories or files, and use `--dry-run` or default stdout when you do not want files written.