Flowchart Exam Generator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is coherent for turning uploaded flowcharts into Excel exam questions, with no evidence of credential access, exfiltration, persistence, or destructive behavior.

This appears safe for its intended use. Before installing or using the helper script, ensure the Python dependency comes from a trusted environment and keep generated Excel output in a location you approve.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the helper script is used, the runtime environment must already provide this package or install it separately.

Why it was flagged

The helper script depends on the third-party openpyxl package, while the supplied artifacts include no install spec or lock/requirements file showing how that dependency is sourced.

Skill content
from openpyxl import Workbook
Recommendation

Use a trusted Python environment or add a pinned requirements file if distributing this as an executable helper.

What this means

A user or agent should choose the output path carefully to avoid overwriting an unintended file.

Why it was flagged

The script writes the generated Excel workbook to a provided output path. This matches the stated purpose, but the save location is not otherwise constrained in the helper.

Skill content
output = sys.argv[2] if len(sys.argv) > 2 else '考试题.xlsx' ... wb.save(output_path)
Recommendation

Save generated files only to a user-approved workspace path and review the generated Excel file before sharing it.