Timeline Chart Generator

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

You may need to install packages before using the skill, which can modify your local system or Python environment.

Why it was flagged

The skill asks the user to install system fonts and depends on Pillow for image generation. This is expected for Chinese text rendering and chart creation, but it changes the local environment and should come from trusted package sources.

Skill content

Install Chinese fonts:
```bash
apt-get install -y fonts-noto-cjk
fc-cache -fv
```
...
- Pillow >= 8.0.0

Recommendation

Install fonts and Python packages only from trusted repositories, and consider using a Python virtual environment for the Pillow dependency.