Data Analyzer

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a straightforward data-analysis instruction set, but users should note that it references a helper script that is not included in the provided artifacts.

This appears benign for analyzing local datasets. Before installing or using it, confirm what implementation will provide scripts/analyze.py, and avoid running unknown code on sensitive data unless you trust the source.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user or agent later finds or creates a scripts/analyze.py file from another source, that code was not reviewed here.

Why it was flagged

The skill documents use of a local helper script, but the supplied manifest says this is an instruction-only skill with no code files present, so the actual script implementation is outside the reviewed artifacts.

Skill content

python3 scripts/analyze.py \
  --input ./data.csv \
  --output ./report/

Recommendation

Verify the source and contents of any scripts/analyze.py implementation before running it, especially on sensitive datasets.

Info

#ASI05: Unexpected Code Execution

What this means

Running local analysis code can read input datasets and write output files, which is normal for this skill but should be done intentionally.

Why it was flagged

The skill's usage examples involve running a local Python command. This is expected for a data-analysis workflow and is shown as user-directed usage, not hidden or automatic execution.

Skill content

```bash
python3 scripts/analyze.py \
  --input ./data.csv \
  --chart bar \
  --x "category" \
  --y "sales" \
  --output ./chart.png
```

Recommendation

Run the commands only with trusted scripts and intended input/output paths.