Calculator Chat

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is purpose-aligned and does not show exfiltration or deception, but it does automate local calculator processes and shell commands to display numbers.

This appears safe for its stated playful calculator purpose, but expect it to run local OS automation, open the calculator, and possibly close an existing calculator instance. Review the Windows/macOS/Linux automation paths if you plan to use them, and do not treat development-plan notes as live instructions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Info

#ASI01: Agent Goal Hijack

What this means

If an agent treats development notes as live instructions, it could follow an unnecessary implementation workflow instead of the user's task.

Why it was flagged

A development plan contains an agent-directed instruction unrelated to normal calculator-chat use. It is in documentation rather than SKILL.md, so it appears to be implementation context, not a runtime command.

Skill content

> **For Claude:** REQUIRED SUB-SKILL: Use superpowers:executing-plans to implement this plan task-by-task.

Recommendation

Treat docs/plans content as non-runtime documentation; use SKILL.md and the user's request as the authoritative instructions.

Low

#ASI02: Tool Misuse and Exploitation

What this means

Using the skill can replace an existing calculator window and interrupt any calculation already open there.

Why it was flagged

The Linux helper may close an existing gnome-calculator process and then launch a new calculator with the selected expression. This is disclosed and purpose-aligned, but it is local process control.

Skill content

if is_calculator_running():
        close_calculator()
...
subprocess.Popen(
            ['gnome-calculator', '--equation', str(number)],

Recommendation

Install only if you are comfortable with the skill opening and closing local calculator windows; avoid invoking it while you need the current calculator state.

Low

#ASI05: Unexpected Code Execution

What this means

On Windows, the skill may request or use local automation capabilities to focus Calculator and send keystrokes.

Why it was flagged

The Windows module writes and runs a temporary PowerShell script with ExecutionPolicy Bypass to automate Calculator. That is aligned with the cross-platform calculator automation purpose, but it is stronger local code execution than a pure calculator API.

Skill content

fs.writeFileSync(scriptPath, psScript, 'utf8');
...
execSync(`powershell -ExecutionPolicy Bypass -File "${scriptPath}" -Num "${number}"`,

Recommendation

Use the reviewed CLI entry point, keep inputs to calculator-style numbers/operators, and review the PowerShell behavior before using the Windows path.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users may need to install or invoke the CLI manually and should understand that the package contains executable local automation code.

Why it was flagged

The package defines an executable CLI even though the registry says there is no install spec. The provided package has no third-party dependencies or remote install scripts, so this is an installation clarity note rather than evidence of unsafe behavior.

Skill content

"bin": {
    "calc-chat": "./src/index.js"
  }

Recommendation

Verify the package contents and invocation method before installing; prefer a clear install spec if one becomes available.