Talos Lite

• Risk level: Low
• Analyzed: May 17, 2026, 12:24 AM
• Findings: 1
• Version: 1.0.1

Overview

Talos Lite is a simple local content-calendar preview, with the main caution being a user-directed Python package install.

This appears safe for a local preview skill. Before using it, consider running the Python example in a virtual environment instead of installing packages into your system Python with --break-system-packages.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Low

What this means

This could change your local Python environment, though it is a disclosed setup step for a formatting library used by the preview script.

Why it was flagged

The skill asks the user to install an unpinned package from the Python package ecosystem and uses --break-system-packages, which can alter the system Python environment.

Skill content

pip3 install rich --break-system-packages --quiet

Recommendation

If you install it, consider using a virtual environment and pinning or reviewing the package version rather than modifying the system Python environment.