PVPC España

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may run local Python scripts when asked for electricity-price information, but the provided scripts do not show destructive or broad system operations.

Why it was flagged

The runtime instructions ask the agent/user to run included Python helper scripts. This is central to the stated purpose and the examples are bounded to price lookup/optimization, but it is still local command execution users should notice.

Skill content
python scripts/get_pvpc.py --now
python scripts/find_cheap_ranges.py
python scripts/optimize_appliance.py --duration 2 --name lavadora
Recommendation

Use the documented commands and review any changed command arguments before running them.

What this means

You have less external context about who maintains the skill, although the artifacts reviewed do not show hidden dependencies or remote install scripts.

Why it was flagged

The registry metadata does not provide upstream provenance or a homepage. The reviewed code is included and no install-time download is specified, so this is a provenance notice rather than a security concern.

Skill content
Source: unknown
Homepage: none
No install spec — this is an instruction-only skill.
Recommendation

If provenance matters, inspect the included scripts or prefer a skill with a public source repository.