study-revision-planner

Security checks across malware telemetry and agentic risk

Overview

This appears to be a coherent study-planning helper; its only notable behavior is a local Python script that can write a CSV schedule file when directed.

This skill looks safe for ordinary study planning. Before using the helper script, choose a safe output filename and avoid pointing it at files you do not want overwritten; also verify the package source if you require strict provenance.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The skill can create or replace a CSV schedule file in the chosen location.

Why it was flagged

The bundled helper uses a caller-controlled output path and opens it for writing. This is aligned with producing a revision schedule CSV, but it can overwrite an existing file if pointed at one.

Skill content
ap.add_argument("--out", default="revision_schedule.csv") ... with open(args.out, "w", encoding="utf-8", newline="") as f:
Recommendation

Use an explicit non-critical output path and confirm before overwriting any existing file.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

You have less provenance and version-assurance information than with a fully linked source repository and consistent package metadata.

Why it was flagged

The registry metadata provides limited external provenance, and it differs from SKILL.md's declared version 1.1.0. This is a packaging/provenance note, not evidence of unsafe behavior.

Skill content
Source: unknown; Homepage: none; Version: 1.0.0
Recommendation

If provenance matters, verify the publisher/package identity and reconcile the version mismatch before installation.