Convert Units

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is coherent for unit, currency, and encoding conversion, with the main consideration being that conversion inputs are sent to an external service.

This skill appears safe and purpose-aligned for routine conversions. Avoid submitting secrets or private text to the encoding endpoint, and review any future payment prompt carefully because the documentation mentions a paid x402 tier after the free quota.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user converts sensitive text, identifiers, or proprietary values, that input may be transmitted to the conversion provider.

Why it was flagged

The skill sends conversion inputs to a named external service. This is disclosed and purpose-aligned, but users should understand that submitted text or values may leave the local environment.

Skill content
curl -X POST https://convert.agentutil.net/v1/encoding ... -d '{"input": "hello", "from": "utf8", "to": "base64"}'
Recommendation

Use the skill for non-sensitive conversion inputs unless you are comfortable sending the data to the listed external service.