Random Test

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a simple joke-telling skill whose only shown behavior is printing static jokes, though it enables the Bash tool to do so.

This looks safe for a simple joke skill. The only thing to notice is that it enables Bash even though it only needs to print text; avoid using it for anything beyond the shown joke commands.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could use a shell for this skill, but the reviewed instructions only call for printing jokes locally.

Why it was flagged

The skill enables the Bash tool, but the only shown use is to run echo commands that print static joke text.

Skill content
allowed-tools: Bash ... echo "Why do programmers prefer dark mode? Because light attracts bugs."
Recommendation

Install only if you are comfortable with a shell-enabled skill; use should remain limited to the documented echo commands.