Data Toolkit

PassAudited by ClawScan on May 4, 2026.

Overview

This appears to be a local data-processing toolkit, with the main cautions being file overwrites and manual package installation.

Before installing, be comfortable running local Python scripts on your data. Use explicit output paths or backups to avoid overwriting originals, and install any Python dependencies from trusted sources.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user or agent could accidentally change or lose the original contents of a local data file.

Why it was flagged

The cleaner is intended to modify data, but its default behavior can overwrite the original input file when an output path is not supplied.

Skill content
parser.add_argument('--output', '-o', help='Output file path (default: overwrites input)')
Recommendation

Use an explicit --output path, keep backups of important files, and confirm before running cleaning operations on original data.

What this means

Different package versions or untrusted package sources could change behavior or introduce dependency risk.

Why it was flagged

The skill relies on a manual, unpinned package installation step while the registry install spec is empty. The packages are purpose-aligned, but their versions and provenance are left to the user environment.

Skill content
pip install pyyaml pandas
Recommendation

Install dependencies from trusted package indexes, consider pinning versions, and prefer a declared/reproducible install specification.