Vulkan Encyclopedia
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a coherent Vulkan documentation helper that uses official docs and a local workspace cache, with only normal review points around its optional scripts and persistent notes.
This skill appears safe for Vulkan documentation and code-review assistance. Before installing, be aware that it may run optional Python helper scripts, fetch official Vulkan docs, and create persistent .Vulkan-Encyclopedia cache and note files in your workspace. Avoid storing secrets in those notes and review the helper scripts if your project is sensitive.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You are installing instructions plus local helper scripts from an unspecified source, although the visible scripts appear aligned with the Vulkan documentation workflow.
The skill has no automatic install mechanism and the helper scripts are included for review, but the publisher source is not identified, so users should treat provenance as a normal installation review point.
Source: unknown ... No install spec — this is an instruction-only skill. ... Code file presence: scripts/cache_doc.py, scripts/init_workspace.py
Install only if you trust the registry/package source, and review the included scripts before running them in important workspaces.
The agent or user may run included Python scripts that perform network requests to docs.vulkan.org and write cache files in the workspace.
The skill documents user-directed execution of a local helper script to fetch and cache official Vulkan docs. This is expected for the skill’s purpose and not hidden.
Use `scripts/cache_doc.py` ... python3 scripts/cache_doc.py --url 'https://docs.vulkan.org/spec/latest/chapters/synchronization.html' --root '<workspace>/.Vulkan-Encyclopedia'
Run the helper scripts only in trusted workspaces, do not use elevated privileges, and keep the cache root under the intended project directory.
Project-specific observations may remain in the workspace and influence later answers or reviews.
The skill intentionally creates persistent local notes that may be reused in future Vulkan work. This is disclosed and purpose-aligned, but persistent notes can become stale or include sensitive project context if users are careless.
record useful authoritative excerpts plus environment-specific operational learnings ... Store environment-specific operational knowledge under: `.Vulkan-Encyclopedia/notes/components/`, `.Vulkan-Encyclopedia/notes/patterns/`, `.Vulkan-Encyclopedia/inventory/`
Periodically review the .Vulkan-Encyclopedia directory, avoid writing credentials or confidential details into notes, and remove stale or incorrect notes.