Sun Path & Environmental Analysis

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do the advertised local sun, shadow, and comfort calculations, with normal cautions around running its Python scripts, installing unpinned packages, and sharing generated images through Telegram.

This skill looks coherent for architectural sun and shadow analysis. Before installing, use a virtual environment for its Python dependencies, keep generated output paths in media or temporary directories, and avoid sending sensitive site or terrain data through Telegram unless that sharing is acceptable.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can run the bundled Python analysis scripts and create output files automatically when a request matches the skill.

Why it was flagged

The skill relies on local shell execution for its core function and asks the agent to run scripts without an extra confirmation step. This is disclosed and purpose-aligned, but it is still sensitive authority.

Skill content
permissions:\n  - shell:exec ... run the corresponding script directly with `exec` ... Do not ask for confirmation
Recommendation

Keep execution limited to the included scripts, use validated numeric arguments, and write outputs to unique files under ~/.openclaw/media/ or /tmp unless the user explicitly asks otherwise.

What this means

Installing dependencies can change the local Python environment and may pull newer package versions than the author tested.

Why it was flagged

The setup requires installing Python packages, and the provided requirements.txt lists package names without version pins. This is normal for this kind of plotting/calculation skill but depends on current upstream packages.

Skill content
run once from the skill folder or with the path to it: `pip install -r requirements.txt`
Recommendation

Install in a virtual environment, review the dependency list, and consider pinning or locking package versions before use in sensitive environments.

What this means

Generated outputs may be shared in the chat channel, which could reveal location or project details contained in the analysis.

Why it was flagged

The skill is designed to send generated charts/images through the OpenClaw Telegram/media channel. This is expected behavior, but the images may include precise site, building, or terrain-derived information.

Skill content
send that image file to the user via the OpenClaw message/media tool
Recommendation

Use only site data and DEM files you are comfortable sharing through the configured chat/media channel.