Bytesagain Email Writer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill appears to generate email templates locally, with only a minor metadata mismatch about its bash/Python helper script.

This looks safe for basic email-template generation. Before installing, note that although the registry describes no install requirements, the included helper uses bash and python3; review or invoke it only if you are comfortable running that local script.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

A user may expect an instruction-only skill, but invoking the documented CLI depends on local shell and Python availability.

Why it was flagged

The included helper depends on local bash and python3 execution, while the registry metadata declares no required binaries and no install spec.

Skill content
#!/usr/bin/env bash
# bytesagain-email-writer — Email writing assistant
set -euo pipefail
...
python3 << 'PYEOF'
Recommendation

Declare bash and python3 in the registry/install metadata, or clearly document that the script is an optional local helper.