product-rnd
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The supplied artifacts describe an instruction-only product report-writing skill with no code or credentials, though its persuasive, assumption-based reports should be reviewed carefully.
This appears low risk from the supplied artifacts because it is instruction-only and does not request local access, credentials, installation, or code execution. Treat its outputs as polished drafts: verify claims, require citations, and ensure assumptions are clearly labeled before using reports for management, investor, or product decisions.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may over-trust polished reports, especially for investor or management decisions.
The skill's stated purpose includes producing persuasive senior-decision reports, which is purpose-aligned but can make AI-generated analysis feel more authoritative than the underlying evidence supports.
create professional, serious, visually appealing, logically clear, highly persuasive... reports... convince them to adopt your proposals
Ask the skill to label assumptions, separate sourced facts from estimates, and include uncertainty or evidence quality before sharing the report.
Generated market or product claims may include plausible but unverified extrapolations.
The skill permits filling data gaps with assumptions, which is common in strategic analysis but should be clearly disclosed to avoid unsupported claims.
Use industry-standard assumptions and experiential judgment when data is insufficient
Require citations where possible and have the output mark assumptions, estimates, and recommendations separately.
Users have less external context for who maintains the skill or where to verify it.
The skill has limited provenance information, although the risk is reduced because the artifacts show no code files, install spec, dependencies, or required binaries.
Source: unknown; Homepage: none
Review the skill text and publisher information before relying on it for important business work.