Charset Fix

PassAudited by ClawScan on May 14, 2026.

Overview

This skill is a small, purpose-aligned Windows encoding helper that does not request credentials, persist itself, or show data exfiltration behavior.

This appears safe for its stated purpose. Before installing, note that its helper can run local PowerShell/cmd diagnostics, and if you use the README's GitHub-based install instructions, verify the repository source.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If run, the helper may execute PowerShell and cmd.exe diagnostic commands on the local Windows machine.

Why it was flagged

The helper script runs local Windows shell commands to inspect encoding and system output. This is expected for the skill's purpose, but users should understand it executes local commands when invoked.

Skill content
subprocess.run(['powershell.exe', '-NoProfile', '-Command', 'chcp'], ...); ... subprocess.run(['cmd.exe', '/c', 'ver'], ...)
Recommendation

Run the helper only when you want encoding diagnostics, and review the visible commands if operating in a sensitive environment.

What this means

If users install from the GitHub instructions instead of the registry artifact, they rely on that repository's current contents.

Why it was flagged

The README documents an optional install path from a GitHub repository without pinning a commit. This is disclosed and not automatically executed by the OpenClaw install path.

Skill content
git clone https://github.com/gkd2323c/charset-fix.git
cd charset-fix
# Claude Code
claude add-skill ./
Recommendation

Prefer the registry artifact when available, or verify the GitHub repository and commit before installing manually.