frontend-code-review

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill reviews frontend code and saves a scoped Markdown report, with no evidence of hidden code, credentials, network access, or unsafe behavior.

This appears safe for its intended use. Before installing, note that it will save code review reports into a reports/ folder in the project, so confirm that generated report files are acceptable in your workspace.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

Using the skill may create a new Markdown report file in the current project.

Why it was flagged

The skill instructs the agent to write a report file and create a reports directory if needed. This is a local workspace mutation, but it is clearly disclosed and directly aligned with the skill's stated purpose.

Skill content
评审完成后,必须将报告内容使用 Write 工具保存为 Markdown 文件:- 目录:项目根目录下的 `reports/`(如不存在则创建)
Recommendation

Install if you are comfortable with the agent saving review reports under the project’s reports/ directory.