Advanced QR Intelligence

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing these dependencies may add third-party code to the user's environment, so the user should trust the package sources.

Why it was flagged

The skill asks the user to install unpinned Python packages and native zbar dependencies manually. This is expected for QR generation/reading, but it relies on external package provenance outside the provided artifacts.

Skill content
pip install qrcode pillow ... pip install pillow pyzbar ... macOS: `brew install zbar` ... Linux: `apt install libzbar0`
Recommendation

Install dependencies in a virtual environment from trusted package managers, consider pinning versions, and review package provenance if using this in a sensitive environment.