Benchmark Tool

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If used carelessly, the disk test could overwrite or delete an existing file named bench_test in the chosen directory, and the network test will contact the selected host.

Why it was flagged

The benchmark operations write and remove a local test file and make an outbound curl request. This is expected for disk and network benchmarking, but it is real system interaction and should be directed carefully.

Skill content

dd if=/dev/zero of=${2:-/tmp}/bench_test bs=1M count=100 oflag=direct 2>&1 | tail -1; rm -f ${2:-/tmp}/bench_test
...
curl -so /dev/null -w 'DNS: %{time_namelookup}s Connect: %{time_connect}s Total: %{time_total}s\n' ${2:-https://google.com}

Recommendation

Run disk tests only in a scratch directory and run network tests only against hosts you intend to contact.