Tech Stack Evaluator

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent technology decision-support skill, with only low-risk notes about optional local Python helper scripts and limited source provenance.

This skill looks reasonable for comparing technology options. Before installing, note that the source provenance is limited and that using the optional Python helpers runs local code; review the scripts if that matters to your environment, and treat outputs as decision support rather than automatic implementation guidance.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the helpers executes code from the skill package on the local machine, though the shown commands are scoped to analysis tasks and sample/user-provided inputs.

Why it was flagged

The skill documents optional Python helper scripts for performing its analyses. This is aligned with the skill purpose, but it is still local code execution if the user or agent chooses to run the scripts.

Skill content
python scripts/tco_calculator.py --input assets/sample_input_tco.json
Recommendation

Only run the helper scripts if you trust the skill package, and review the generated reports before using them for business or architecture decisions.

What this means

A user has less external context for verifying the publisher or comparing the packaged scripts to an upstream project.

Why it was flagged

The registry metadata does not provide an upstream source or homepage, which limits provenance verification even though no risky install mechanism or dependency behavior is shown.

Skill content
Source: unknown; Homepage: none
Recommendation

Treat this as a provenance note: inspect the included files and trust the listed publisher before relying on or running the scripts.