Principle Comparator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is purpose-aligned for comparing user-provided sources, with only a minor packaging/version inconsistency to notice.

This appears safe for normal analytical use. Before installing, note the minor version mismatch, and avoid submitting sensitive source text unless you are comfortable with how your agent's configured model provider processes prompts.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

A user may want to confirm they are installing the intended release, but the mismatch does not by itself indicate unsafe behavior.

Why it was flagged

The package metadata and embedded skill metadata do not match, which is a minor provenance/versioning inconsistency. There is no accompanying code or install step that makes this high-impact.

Skill content
Registry metadata: Version: 1.0.3; SKILL.md frontmatter: version: 1.0.2
Recommendation

Verify the package version against the homepage or registry if exact release provenance matters.