坐标转换
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This skill is a straightforward GeoJSON coordinate conversion tool; the only noteworthy point is its manual, unpinned Python dependency installation.
This appears safe for its stated purpose. Before installing, use a trusted Python environment for pyproj and be mindful that the script will read the input path and write to the output path you provide.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You may need to install an external Python dependency before using the skill.
The skill depends on an external Python package installed manually outside an install spec. This is expected for GIS coordinate transformations, but users should install it from a trusted source.
pip3 install pyproj
Install pyproj from a trusted package source, preferably in a virtual environment, and consider pinning a known-good version if reproducibility matters.