Ufo

PassAudited by ClawScan on May 9, 2026.

Overview

This skill appears to be a coherent local document-analysis workbench for UFO/UAP releases, with only normal cautions about installing Python packages and storing extracted document text locally.

This skill looks safe for its stated purpose. Before installing, use a virtual environment for the Python dependencies and run it only on folders you intentionally want analyzed, because it will create local extracted-text and report files from those documents.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the optional dependencies pulls code from the Python package ecosystem onto the user's machine.

Why it was flagged

The skill relies on third-party Python packages that are installed manually and are not pinned to specific versions. This is expected for PDF processing, but it is still a supply-chain consideration.

Skill content
python3 -m pip install pdfplumber pypdf
Recommendation

Install dependencies in a virtual environment, verify package names, and consider pinning trusted versions before use.

What this means

If the user points the skill at private or unrelated PDFs, their extracted text may be saved in the folder and used as analysis context.

Why it was flagged

The script persists extracted document text locally for later analysis. This is central to the skill's function, but users should remember that document contents may be sensitive or untrusted.

Skill content
Extract text from every PDF in <release_root>/release_*/ to <release_root>/text/.
Recommendation

Use the skill only on intended document folders, review generated text/artifacts before sharing them, and keep the built-in skepticism labels when interpreting claims.