Senior Architect

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears coherent and purpose-aligned, but it uses bundled Python scripts to inspect user-selected project files, so users should run it only on intended repositories and review outputs before sharing.

This skill looks safe for its stated architecture-analysis purpose. Before using it, remember that the examples run local Python scripts and may read source files inside the project directory you choose, so avoid pointing it at unrelated private folders and review any generated output before sharing.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the examples executes bundled Python analysis tools on your machine.

Why it was flagged

The skill is not purely advisory; it documents running bundled local Python scripts. This is central to the stated purpose and user-directed, but users should notice that using the skill may involve executing local code.

Skill content
python scripts/architecture_diagram_generator.py ./my-project --format mermaid
Recommendation

Inspect the scripts if provenance matters, and run only the commands and paths you intend.

What this means

The tool may summarize local project structure, imports, and dependencies in its output.

Why it was flagged

The helper scans directories and reads source files to extract imports and structure. This is purpose-aligned for architecture diagrams, but it can inspect many files if pointed at a broad directory.

Skill content
files = list(dir_path.rglob('*')) ... content = file_path.read_text(encoding='utf-8', errors='ignore')
Recommendation

Run it only against intended project folders and review generated reports before sharing them externally.

What this means

You have less external provenance information for deciding whether to trust the included helper scripts.

Why it was flagged

The registry metadata does not identify an upstream source or homepage for the bundled scripts. No remote installer or dependency download is shown, so this is a provenance note rather than a behavioral concern.

Skill content
Source: unknown; Homepage: none
Recommendation

Rely on the visible bundled contents and the publisher trust level before installing or running the skill.