Cerbug45 Email Formatter

ReviewAudited by ClawScan on May 10, 2026.

Overview

The email-formatting logic is mostly coherent, but the skill tells agents to run a first-use installer that downloads unpinned Python packages and may modify the local Python environment despite being presented as having no install requirements.

Review this skill before installing because its formatting code appears local and purpose-aligned, but its documentation asks agents to run setup commands that install unpinned Python packages and create persistent files. Only run the installer if you explicitly approve those environment changes, ideally in a virtual environment.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence
ASI05: Unexpected Code Execution
What this means

Installing the skill could change the user's local Python environment or run downloaded package code before the user has clearly approved that setup.

Why it was flagged

This directs the agent to execute a shell-based installation flow and package installation at first use, rather than limiting the skill to instruction-only email formatting.

Skill content
**For AI Agents: Run this installation check at first use** ... pip3 install --break-system-packages --quiet language-tool-python textstat spacy
Recommendation

Require explicit user approval before running any installer, avoid automatic first-use execution, and prefer an isolated virtual environment or reviewed install spec.

What this means

A dependency update or compromised package could affect the local environment, and --break-system-packages can interfere with system-managed Python installations.

Why it was flagged

The installer fetches unpinned public packages and may use --break-system-packages, while the registry declares no install spec or dependency requirements.

Skill content
pip3 install --break-system-packages --quiet language-tool-python textstat 2>/dev/null || pip3 install --user --quiet language-tool-python textstat
Recommendation

Pin dependency versions, declare the installer and dependencies in metadata, avoid --break-system-packages, and install only after user confirmation.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The skill may refuse or heavily constrain formatting for drafts that match its safety patterns, including possible false positives.

Why it was flagged

The skill imposes mandatory pre-processing and blocking rules before performing the user's requested formatting task.

Skill content
Every email MUST pass ALL security layers before any formatting occurs
Recommendation

Keep the safety checks transparent, explain any refusal clearly, and allow the user to review or bypass false positives where appropriate and safe.