Talos — God of Automation

PassAudited by VirusTotal on May 9, 2026.

Overview

Type: OpenClaw Skill Name: talos Version: 1.0.1 The 'talos' skill is a social media content generator that operates entirely locally. It uses the 'rich' library to format a 4-week posting schedule and generates platform-specific captions based on user-provided environment variables, saving the output to local JSON and Markdown files without any network calls or sensitive data access (SKILL.md).

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing this way could change your system Python environment or pull whatever version of the package is current at install time.

Why it was flagged

The skill asks the user to install an unpinned PyPI package and bypass normal system-package protections. This is disclosed and only used for the local workflow, but it is still a supply-chain/environment-change point users should notice.

Skill content
pip3 install rich --break-system-packages --quiet
Recommendation

Prefer running this in a virtual environment and, if possible, pin the dependency version rather than using --break-system-packages.

What this means

Running the snippet gives the code access to the local Python process and working directory, even though no dangerous behavior is shown in the visible artifact.

Why it was flagged

The skill's main workflow is to run embedded Python code locally. The visible code is aligned with calendar generation and reads configuration from environment variables, but users should still recognize they are executing local code from the skill instructions.

Skill content
## Step 2 — Build Your Content Calendar
```python
import os, json, re, random
from datetime import date, timedelta
from rich.console import Console
Recommendation

Review the full script before running it, execute it in a temporary folder or virtual environment, and avoid adding sensitive environment variables that the skill does not require.