Research Planner

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a coherent, instruction-only research-planning skill with no code or credential access; just verify the optional external manual install route if you use it.

This skill appears safe to use for drafting research plans and research materials. If your work involves participants, recordings, or personal data, review the generated consent and privacy language with your legal or compliance process. If installing manually, verify the referenced GitHub/npx source first.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

If you install manually, you are trusting an external repository path rather than only the registry entry.

Why it was flagged

The manual installation path relies on an external GitHub URL and npx. This is disclosed and user-directed, and no code is present in the provided artifacts, but users should still verify the source before using that route.

Skill content
Manual Installation:
```bash
npx skills add https://github.com/NKZ55/research-planner/tree/main/skills/research-planner
```
Recommendation

Prefer the ClawHub install path when possible, or inspect the referenced GitHub repository before running the manual npx command.