Nm Oracle Setup

PassAudited by ClawScan on May 9, 2026.

Overview

This setup skill is coherent and purpose-aligned, but users should notice that it runs local provisioning code, downloads Python packages, and prepares a daemon for later use.

This appears to be a normal setup helper for an ML inference daemon. Before installing or invoking it, make sure you trust the local claude-night-market oracle plugin checkout, have uv installed intentionally, and are comfortable with downloading onnxruntime and enabling a daemon for future sessions.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI05: Unexpected Code Execution

What this means

When invoked, the agent may run setup code on the user's machine to create the inference environment.

Why it was flagged

The skill tells the agent to run a shell command that executes Python provisioning code. This is expected for an environment setup skill, but it is still local code execution.

Skill content

cd plugins/oracle && uv run python -c "
from oracle.provision import provision_venv, get_venv_path
result = provision_venv(get_venv_path())

Recommendation

Only run this skill from a trusted checkout of the referenced project, and review the local oracle.provision code if possible.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The setup may fetch dependencies from the network during provisioning.

Why it was flagged

The setup depends on downloading and installing an external Python package; this is purpose-aligned, but the artifact does not pin or show the package provenance beyond the instruction.

Skill content

Installs onnxruntime into the venv

Recommendation

Use a trusted package source and consider pinning dependency versions if reproducibility or supply-chain control is important.

Info

#ASI10: Rogue Agents

What this means

After setup, a related daemon may run in a later session rather than only during the current invocation.

Why it was flagged

The artifact discloses future daemon activity. That is aligned with the inference-daemon purpose, but users should notice that setup affects future sessions.

Skill content

If successful, tell the user the daemon will start on next session.

Recommendation

Confirm that you want the oracle daemon available in future sessions and know how to disable it in the parent plugin if needed.