PVPC España
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent for checking Spanish PVPC electricity prices and shows only bounded local scripts plus a disclosed public API call, with no credentials, persistence, or data mutation.
This skill appears safe for its stated purpose. Expect it to run included Python scripts and contact the public ESIOS/REE API for electricity prices; it does not request credentials, store history, or modify accounts/files in the reviewed artifacts.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may run local Python scripts when asked for electricity-price information, but the provided scripts do not show destructive or broad system operations.
The runtime instructions ask the agent/user to run included Python helper scripts. This is central to the stated purpose and the examples are bounded to price lookup/optimization, but it is still local command execution users should notice.
python scripts/get_pvpc.py --now python scripts/find_cheap_ranges.py python scripts/optimize_appliance.py --duration 2 --name lavadora
Use the documented commands and review any changed command arguments before running them.
You have less external context about who maintains the skill, although the artifacts reviewed do not show hidden dependencies or remote install scripts.
The registry metadata does not provide upstream provenance or a homepage. The reviewed code is included and no install-time download is specified, so this is a provenance notice rather than a security concern.
Source: unknown Homepage: none No install spec — this is an instruction-only skill.
If provenance matters, inspect the included scripts or prefer a skill with a public source repository.