wikipedia-oc

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a straightforward Wikipedia lookup helper, with the main caveat that it asks users to install an unpinned Python package.

This appears safe for normal Wikipedia lookup use. Before installing, be aware that it asks for the `wikipedia` Python package from PyPI without pinning a version; use a trusted Python environment if that matters to you.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing an unpinned package may result in different code being installed over time, depending on the current PyPI release.

Why it was flagged

The skill depends on installing the external `wikipedia` package from PyPI, and the example does not pin a package version. This is purpose-aligned but gives the installed package supply-chain significance.

Skill content

pip install wikipedia

Recommendation

Install from a trusted environment and consider pinning or reviewing the package version if reproducibility matters.