DTEK Light

PassAudited by ClawScan on May 1, 2026.

Overview

The skill coherently checks a public DTEK outage page for one fixed address, but it requires disclosed Node/Playwright setup and local script execution.

This appears safe for its stated purpose: checking power status for the configured address through DTEK. Before installing, be comfortable with installing Playwright/Chromium and running the included Node script locally.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill's prerequisites may download external code and browser binaries onto the user's machine.

Why it was flagged

The setup downloads a third-party JavaScript package and a Chromium browser binary. This is expected for Playwright-based website automation, but it is a supply-chain/provenance point users should be aware of.

Skill content
npm install playwright
npx playwright install chromium
Recommendation

Install prerequisites only from trusted package sources, and consider pinning dependency versions if packaging this skill for wider use.

What this means

When invoked, the skill runs local JavaScript that launches headless Chromium and contacts the DTEK outage website.

Why it was flagged

The skill tells the agent to execute the included local Node.js script. The script's behavior matches the stated outage-checking purpose, but it is still local code execution.

Skill content
node "$(dirname "$(find ~/.claude/skills -name 'check-light.js' -path '*dtek-light*' | head -1)")/check-light.js"
Recommendation

Review the included script before use and invoke the skill only when you want it to perform the outage check.