Pandas Construction Analysis

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent may read or write local project data files as part of analysis and reporting.

Why it was flagged

The skill declares filesystem permission, which is expected for reading construction datasets and exporting reports, but it still gives the agent local file access.

Skill content

"permissions": [
    "filesystem"
  ]

Recommendation

Use explicit file paths, keep outputs in a known project folder, and review any export destination before allowing writes.

Note

ASI05: Unexpected Code Execution

What this means

Analysis may involve running local Python code against files the user provides.

Why it was flagged

The skill provides Python/Pandas code patterns for local data processing. This is central to the stated purpose and is not shown as hidden or automatic install-time execution.

Skill content

import pandas as pd

# Read construction data
df = pd.read_excel("bim_export.xlsx")

Recommendation

Run analysis only on trusted datasets and avoid treating arbitrary user-supplied text as executable Python code.