bearing search skill
PassAudited by ClawScan on May 10, 2026.
Overview
This appears benign: it provides bearing lookup and reference guidance, with only a low-risk note that its helper script depends on trusted local JSON data.
The skill appears safe from an agentic-security perspective. If you use the Python helper, make sure the local data/models files are expected and trusted, and verify bearing selections for safety-critical or engineering use.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the helper script is used, incorrect or untrusted local bearing data could lead to inaccurate recommendations, though the script does not execute that data or access sensitive accounts.
The helper resolves bearing data from a local data directory outside the script folder and loads JSON files from data/models. This is purpose-aligned, but the answers may depend on local data whose provenance should be trusted.
project_dir = skill_dir.parent.parent.parent
return project_dir / "data"
...
for json_file in models_dir.glob("*.json"):Use trusted bearing data files, confirm the expected data path, and verify critical specifications against manufacturer datasheets.