Auto PieceOne

PendingAudited by VirusTotal on May 12, 2026.

Overview

No VirusTotal analysis has been recorded yet. File reputation checks will appear here once the artifact hash has been scanned.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or launching the skill could run changed or unreviewed code from the remote repository on the user's machine.

Why it was flagged

The skill instructs the agent to download, update, and run code from an external GitHub repository, but that code is not included in the reviewed artifacts and no commit pinning or verification is provided.

Skill content
exec(command="git clone https://github.com/imtonyjaa/autopieceone.git") ... exec(command="git -C autopieceone pull") ... exec(command="python autopieceone/autopieceone.py CharacterName")
Recommendation

Only use it after manually reviewing the GitHub repository, pinning a trusted commit, and avoiding automatic pulls before execution.

ConcernHigh Confidence
ASI05: Unexpected Code Execution
What this means

The Python script would execute locally with the user's permissions and could affect the desktop environment.

Why it was flagged

Although code execution is needed for this automation, the artifacts provide only instructions and direct the agent to install dependencies and run a Python script whose contents were not supplied for review.

Skill content
pip install pyautogui pyperclip python-dotenv ... exec(command="python autopieceone/autopieceone.py CharacterName")
Recommendation

Run this only in a controlled environment after reviewing the script and dependency versions; prefer a packaged skill with included, pinned code.

What this means

If another window becomes active, automated clicks or typing may affect that window instead of the game.

Why it was flagged

The skill discloses that it uses PyAutoGUI-style desktop control, which is purpose-aligned for game automation but can click or type into the wrong application if focus changes.

Skill content
The script uses system-level mouse control, so the game window must be in the foreground.
Recommendation

Keep the game isolated and in the foreground, monitor the automation while it runs, and know how to trigger the PyAutoGUI failsafe.