Talos — God of Automation
PassAudited by ClawScan on May 9, 2026.
Overview
This appears to be a local social-media calendar generator, with the main thing to notice being that it asks you to install and run local Python code.
This skill looks coherent for offline social-media calendar generation. Before installing, use a Python virtual environment if possible, review the full code block, and avoid using --break-system-packages on your main system Python unless you understand the impact.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing this way could change your system Python environment or pull whatever version of the package is current at install time.
The skill asks the user to install an unpinned PyPI package and bypass normal system-package protections. This is disclosed and only used for the local workflow, but it is still a supply-chain/environment-change point users should notice.
pip3 install rich --break-system-packages --quiet
Prefer running this in a virtual environment and, if possible, pin the dependency version rather than using --break-system-packages.
Running the snippet gives the code access to the local Python process and working directory, even though no dangerous behavior is shown in the visible artifact.
The skill's main workflow is to run embedded Python code locally. The visible code is aligned with calendar generation and reads configuration from environment variables, but users should still recognize they are executing local code from the skill instructions.
## Step 2 — Build Your Content Calendar ```python import os, json, re, random from datetime import date, timedelta from rich.console import Console
Review the full script before running it, execute it in a temporary folder or virtual environment, and avoid adding sensitive environment variables that the skill does not require.