Flex

PassAudited by ClawScan on May 1, 2026.

Overview

Flex appears to be a straightforward local CSS Flexbox helper, with disclosed local script execution and file storage.

Before installing, expect it to run a local Bash/Python script, create ~/.flex/data.jsonl, and optionally write exported CSS files. Use safe export paths and do not store sensitive information in layout names.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI05: Unexpected Code Execution

What this means

Running the skill executes local script code on the user's machine.

Why it was flagged

The skill is implemented as a local Bash script that invokes inline Python. This is expected for the advertised CLI layout generator, but it means use involves local command execution.

Skill content

#!/usr/bin/env bash
set -euo pipefail
...
python3 << 'PYEOF'

Recommendation

Run it with normal user permissions and review commands before invoking them, especially if editing paths or files.

Low

#ASI02: Tool Misuse and Exploitation

What this means

An agent or user could save CSS output to the wrong location or overwrite an existing file.

Why it was flagged

The export command supports writing generated CSS to a user-specified path. This is purpose-aligned, but file-output tools can overwrite or alter local files if used carelessly.

Skill content

`--output` — Output file path (optional, default: stdout)

Recommendation

Use explicit, safe output paths and check before exporting over important files.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users may not realize the skill needs bash and Python available before use.

Why it was flagged

The skill discloses runtime prerequisites in SKILL.md, while the registry metadata declares no required binaries. This may affect install expectations, but it does not show hidden or unrelated dependencies.

Skill content

- Python 3.8+
- `bash` shell

Recommendation

Confirm the local environment has bash and Python 3.8+ before relying on the skill.

Info

#ASI06: Memory and Context Poisoning

What this means

Saved layout names and properties persist locally after commands finish.

Why it was flagged

The skill persistently stores layout configurations in a local file. This is disclosed and proportionate for a layout generator, but users should know the data remains on disk.

Skill content

All layout configurations are stored in JSONL format at `~/.flex/data.jsonl`.

Recommendation

Avoid putting secrets in layout names or properties, and delete ~/.flex/data.jsonl if you no longer want the saved layouts.