Ceo Advisor 1.0.0

Security checks across malware telemetry and agentic risk

Overview

This skill appears to provide CEO guidance materials and local analysis scripts, with no artifact evidence of credential use, network access, persistence, or hidden behavior.

This skill looks coherent for executive strategy and financial planning. Before using it, be aware that its quick start involves running bundled Python scripts and that the package has limited source/homepage provenance; review the scripts if you plan to execute them.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI05: Unexpected Code Execution
Low
What this means

Using the skill may involve running local Python code from the package to perform strategy or financial analysis.

Why it was flagged

The skill explicitly instructs users to run bundled Python analyzer scripts. This is disclosed and central to the skill's purpose, but it is still local code execution.

Skill content
python scripts/strategy_analyzer.py ... python scripts/financial_scenario_analyzer.py
Recommendation

Review the bundled scripts before running them and execute them only when you intend to use the analysis tools.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

It may be harder to verify the package origin or know ahead of time that Python is needed.

Why it was flagged

The package has limited provenance metadata and does not declare Python as a required binary even though SKILL.md documents Python script usage.

Skill content
Source: unknown; Homepage: none; Required binaries (all must exist): none
Recommendation

Confirm you trust the package publisher and have reviewed the included files before installing or running the helper scripts.