Render Stl Png
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
First use may download Python package code into a local cache; future package-index changes could affect the environment created by the wrapper.
Why it was flagged
When the recommended wrapper is used, it installs or upgrades packages in a cached virtual environment without a pinned Pillow version or lockfile in the artifacts.
Skill content
"$VENV/bin/pip" install --upgrade pip >/dev/null "$VENV/bin/pip" install pillow >/dev/null
Recommendation
Use the wrapper only in a trusted environment, or pin dependency versions if repackaging or deploying this skill more strictly.