snek

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to only run a small disclosed local script that prints Netsnek/snek copyright and brand information.

This looks low-risk: the only noteworthy point is that it requests permission to execute a bundled Bash script. The reviewed script simply prints Netsnek/snek copyright and website information and does not access files, credentials, network APIs, or persistent state.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill allows the agent to run its bundled local script, but the reviewed script only outputs fixed brand information.

Why it was flagged

The skill asks for local execution capability and instructs the agent to run a bundled script. The script is included and only prints static copyright/website information, so this is disclosed and purpose-aligned.

Skill content
permissions:
      - exec
...
When a user asks about snek or requests copyright information, run the copyright script:

```bash
scripts/copyright.sh
```
Recommendation

Install only if you are comfortable granting this small skill exec permission; the current script contents are simple and consistent with the stated purpose.