MoA Explainer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a purpose-aligned local Python text generator, with only user-directed script execution and optional output-file writing to notice.

This skill appears safe for its stated purpose. Before use, confirm the drug, mechanism, target, audience, and output location, and review medical/scientific accuracy before relying on generated educational material.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or using the skill may involve running local Python code from the skill package.

Why it was flagged

The skill instructs use of a packaged local Python script. This is expected for the stated generator workflow and no hidden execution behavior is evidenced.

Skill content
python -m py_compile scripts/main.py
python scripts/main.py --help
Recommendation

Run it only from the reviewed skill directory and keep normal local-code precautions, especially if modifying the script or adding dependencies.

What this means

A mistaken or unsafe output path could overwrite a local file with generated text.

Why it was flagged

The script can write generated text to any output path supplied at runtime. This is purpose-aligned but should be kept within a safe workspace to avoid accidental overwrite.

Skill content
parser.add_argument("--output", "-o", help="Output file")
...
if args.output:
    with open(args.output, 'w') as f:
        f.write(text)
Recommendation

Use an explicit workspace-local output path and avoid protected, shared, or existing important files.