Data Validation

Security checks across malware telemetry and agentic risk

Overview

This is a coherent instruction-only data validation guide; its command and package examples are expected for the purpose but should be run deliberately.

This skill appears safe for normal use as a data-validation reference. Before copying its shell examples, review the commands, install dependencies from trusted sources, and make sure the file paths only include data you intend to validate.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

If a user runs these examples, their package manager may download third-party validation tools.

Why it was flagged

The skill documents package-manager-based setup and validation commands that may fetch third-party packages. This is expected for a data-validation guide, but the examples do not pin package versions.

Skill content
npx ajv-cli validate -s schema.json -d data.json
...
pip install jsonschema
Recommendation

Use trusted registries, pin package versions in real projects, and review packages before installing them.

#
ASI05: Unexpected Code Execution
Info
What this means

Running the examples will execute local Python or Node commands and read the specified local data files.

Why it was flagged

The skill includes local command execution examples that read schema and data files for validation. This is central to the stated purpose and is presented as a user-run example.

Skill content
python3 -c "
import json, jsonschema
schema = json.load(open('schema.json'))
data = json.load(open('data.json'))
jsonschema.validate(data, schema)
print('Valid')
"
Recommendation

Run the commands only in the intended project directory and confirm the file paths before using them on sensitive data.