Paper to Pipeline

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears to generate machine-learning experiment code as advertised, but users should review generated Python before running it.

This looks like a normal ML pipeline generator rather than a credential- or system-accessing skill. Install/use it only if you are comfortable reviewing generated Python before running it, especially when the source experiment plan came from someone else. Also verify the missing referenced templates if you need text, regression, clustering, or other non-image pipeline generation.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A malicious or malformed experiment plan could influence the generated Python project; if the user runs it without review, unintended code could run.

Why it was flagged

Fields parsed from the uploaded experiment plan are embedded into generated Python source. This is central to the skill's code-generation purpose, but generated code should be reviewed before being run, especially for plans from untrusted sources.

Skill content
backbone_match = re.search(r'backbone[:\\s]+(.+)', m_text) ... model_name = "{model_info.get('backbone', 'resnet18')}"
Recommendation

Use trusted experiment plans, review generated files before execution, and prefer escaping or allowlisting parsed values such as model names in future versions.

What this means

Some advertised generation paths may not work as expected, or may require files that were not included in the reviewed artifact set.

Why it was flagged

The skill references templates and a training-best-practices document that are not present in the supplied manifest, which may make parts of the advertised functionality incomplete or dependent on code not reviewed here.

Skill content
文本分类 → `assets/templates/text_classification.py` ... 回归预测 → `assets/templates/regression.py` ... `references/training-best-practices.md`
Recommendation

Before relying on non-image templates, verify that all referenced files are present and review any additional files if they are supplied later.