Tech Stack Evaluation

PassAudited by ClawScan on May 8, 2026.

Overview

This instruction-only skill appears benign; its only notable behavior is read-only project inspection to support tech stack recommendations.

This skill is reasonable for architecture and stack review. Before using it, make sure the agent is operating in the correct repository, since it may inspect local source files and file counts to support its recommendations.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent may examine local source files or file statistics in the current project to make recommendations.

Why it was flagged

The skill documents local shell commands for inspecting project structure and code metrics. These commands are read-only and directly support the stated maintainability assessment purpose.

Skill content

Use the `codebase-survey` skill's maintainability audit to produce evidence:

```bash
# File size audit
find . -type f ... | xargs wc -l | sort -rn | head -20

# Method/function count audit
grep -c "def " app/core/allocation.py
```

Recommendation

Use the skill from the intended project directory and review any proposed commands if the repository contains sensitive or unrelated files.