Skill Smoke Test Author

Security checks across malware telemetry and agentic risk

Overview

This skill coherently generates local Markdown smoke-test templates, with only disclosed low-risk local Python execution and limited source provenance to notice.

This appears safe to install for generating smoke-test Markdown. Before use, check that any input files are intended for testing work, avoid feeding sensitive material unless necessary, and review the generated output before applying it.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI05: Unexpected Code Execution
Info
What this means

The skill may process a chosen local input file and write a generated Markdown output file when the helper command is used.

Why it was flagged

The skill explicitly allows running a bundled local Python script. This is disclosed and purpose-aligned, but users should notice that installing the skill may lead the agent to execute local helper code.

Skill content
如运行环境允许 shell / exec,可使用:`python3 "{baseDir}/scripts/run.py" --input <输入文件> --output <输出文件>`
Recommendation

Run it only on intended skill materials, choose safe input and output paths, and use dry-run/stdout behavior when you only want a review.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Users have limited upstream source information beyond the registry metadata when deciding whether to trust the bundled script.

Why it was flagged

The artifact provenance is not strongly verifiable from the supplied metadata. There is no remote installer or dependency chain shown, so this is a notice rather than a concern.

Skill content
Source: unknown; Homepage: https://example.invalid/skills/skill-smoke-test-author
Recommendation

Prefer registry-trusted releases and review the bundled files before running the helper script in important workspaces.