Dcs

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to be a simple local entry/config manager with no network or credential use, though its DCS/industrial branding and persistent local storage are worth noticing.

This looks safe to install as a local record-keeping script, but do not rely on it as a real distributed-control-system manager. Review any remove/export actions, and be aware that entries persist locally under ~/.dcs unless you change or clear that directory.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could overestimate what the skill does and rely on it for DCS status or control that the artifacts do not show.

Why it was flagged

The DCS/industrial description is broader than the documented local entry-store behavior, so users and agents should not over-trust it as actual industrial control functionality.

Skill content
description: "Distributed control system manager" ... Commands: status, add, list, search, remove, export ... All data stored in `~/.dcs/` using JSONL format
Recommendation

Treat this as a local record manager unless additional, reviewed artifacts prove real DCS integration.

What this means

If invoked, the agent can remove local records or write export files in the working directory.

Why it was flagged

The script can delete entries from its local data file and create export files. This is disclosed and scoped, but still mutates local data.

Skill content
cmd_remove() ... sed -i "${num}d" "$DATA_DIR/data.jsonl" ... cmd_export() ... cp "$DATA_DIR/data.jsonl" "$out"
Recommendation

Confirm remove and export actions before running them, and keep the data directory scoped to non-sensitive records.

What this means

Information added to the skill may remain on disk across sessions and be surfaced later by list, search, or export commands.

Why it was flagged

The skill persists user-provided entries locally, which can later be listed, searched, or exported.

Skill content
All data stored in `~/.dcs/` using JSONL format (one JSON object per line).
Recommendation

Avoid storing sensitive information unless you are comfortable with it being retained locally, and delete or relocate the data directory when needed.