Prettierrc Validator

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a local Prettier configuration checker that runs an included Python script on files you choose, with no evidence of credential use, persistence, network access, or data exfiltration.

This skill looks appropriate for validating Prettier configuration files. Before installing, be aware that it runs an included Python script and reads the file path you provide; use trusted optional dependencies if you add YAML or TOML parser packages, and only enable the CI-failing workflow when you want config errors to block builds.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked with the wrong path, the script will read that local file while trying to parse it as a Prettier config.

Why it was flagged

The validator reads the user-supplied file path. This is expected for a config validator, but it means the tool should be pointed only at intended Prettier config files.

Skill content
with open(filepath, 'r', encoding='utf-8') as f:
            content = f.read()
Recommendation

Run it only on intended `.prettierrc` or `package.json` files and review paths before using it in automation.

What this means

Optional dependency choices could affect the local parsing environment if the user installs them separately.

Why it was flagged

The skill discloses optional third-party parser dependencies. No install command or remote script is provided, but users who add these packages should use trusted, pinned sources.

Skill content
Optional: `PyYAML` (better YAML parsing — falls back to a minimal parser for simple configs)
Optional: `tomli` (only for Python 3.10 and below; Python 3.11+ has `tomllib` built in)
Recommendation

If installing optional dependencies, use trusted package indexes and pinned versions where practical.

What this means

Using the skill involves executing local Python code from the skill package.

Why it was flagged

The documented workflow runs the included Python script. This is central to the skill's stated purpose and is disclosed rather than hidden.

Skill content
python3 scripts/prettierrc_validator.py lint .prettierrc.json
Recommendation

Review the included script if desired and run it in the project context where Prettier configs should be checked.

What this means

If added to CI, invalid Prettier configs can intentionally block a build or deployment step.

Why it was flagged

The skill documents use as a CI gate that can fail a pipeline step. This is disclosed and purpose-aligned, but users should be aware before adopting it in automation.

Skill content
python3 scripts/prettierrc_validator.py lint .prettierrc.json --format summary
# exit 1 on any error — fails the CI step
Recommendation

Use the CI gate only where build-blocking validation is desired, and tune workflow handling for warnings versus errors.