Cross Disciplinary Bridge Finder

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill appears aligned with interdisciplinary research assistance, but users should review its local command/write access and packaging inconsistencies before use.

This looks safe to review as a local research-helper skill. Before installing or running it, check that the referenced modules and docs actually exist, review the Python dependencies, and approve any Bash or file-editing actions explicitly.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The agent may run local Python commands and create or modify files when using this skill.

Why it was flagged

The skill is permitted to read, write, edit, and run shell commands; this supports the documented CLI workflow but is broader than a purely advisory research skill.

Skill content
allowed-tools: "Read Write Bash Edit"
Recommendation

Use it in a project directory, review commands before execution, and avoid letting it edit unrelated files.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

Example code may fail or rely on files that were not included in the reviewed artifact set.

Why it was flagged

The quick-start references a module that is not included in the provided manifest, suggesting the docs and packaged files may be out of sync.

Skill content
from scripts.interdisciplinary import CollaborationFinder
Recommendation

Verify the package contents before relying on the quick-start examples, and prefer the included scripts/main.py entry point if it matches your task.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

Installing all script requirements may add an external provider library that is not clearly needed for the documented workflow.

Why it was flagged

An OpenAI dependency is declared in the script requirements, but the visible SKILL.md and visible imports do not explain why an external AI provider package is needed.

Skill content
openai>=1.0
Recommendation

Review dependencies before installation and install only the packages needed for the local workflow.