DTEK Light
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: dtek-light Version: 1.0.0 The skill is designed to check power outage status from dtek-oem.com.ua using Playwright. The `SKILL.md` instructs the agent to execute a local Node.js script (`check-light.js`) and interpret its JSON output. The `check-light.js` script uses Playwright to navigate and scrape data from the specified DTEK website. File system access in `check-light.js` is limited to locating the Playwright Chromium executable, and the `find` command in `SKILL.md` is used to locate the skill's own script. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection aiming for harmful behavior. All actions are aligned with the stated purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill's prerequisites may download external code and browser binaries onto the user's machine.
The setup downloads a third-party JavaScript package and a Chromium browser binary. This is expected for Playwright-based website automation, but it is a supply-chain/provenance point users should be aware of.
npm install playwright npx playwright install chromium
Install prerequisites only from trusted package sources, and consider pinning dependency versions if packaging this skill for wider use.
When invoked, the skill runs local JavaScript that launches headless Chromium and contacts the DTEK outage website.
The skill tells the agent to execute the included local Node.js script. The script's behavior matches the stated outage-checking purpose, but it is still local code execution.
node "$(dirname "$(find ~/.claude/skills -name 'check-light.js' -path '*dtek-light*' | head -1)")/check-light.js"
Review the included script before use and invoke the skill only when you want it to perform the outage check.