cp2k-input-generator

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The assistant may read user-specified chemistry files and create or overwrite a CP2K input file at the chosen path.

Why it was flagged

The skill explicitly asks the agent to read local structure files and write the generated CP2K input file. This is expected for the stated purpose, but users should be aware of the local file access and output-write behavior.

Skill content
使用 `read_file` 工具读取结构文件内容 ... 将生成的输入文件写入 `function.inp`
Recommendation

Provide only the intended structure/output files, confirm the output path, and review the generated .inp before using it in computations.

What this means

If the optional helper is run, it executes local Python code and reads/writes the files named in the command.

Why it was flagged

The skill documents optional execution of a bundled Python helper. This is user-directed and aligned with generating CP2K inputs, and the visible script content is consistent with parsing structure files and generating text.

Skill content
对于复杂的输入文件生成,可以使用 `scripts/generate_cp2k_input.py` 脚本: `python scripts/generate_cp2k_input.py <calculation_type> <structure_file> ...`
Recommendation

Run the helper only from the installed skill directory, use explicit input/output paths, and inspect the generated file.

What this means

Users have limited upstream information to verify the publisher or project history.

Why it was flagged

The registry metadata provides limited provenance and no homepage, while the skill includes a local helper script. No external dependencies or suspicious static scan findings are shown, so this is a provenance note rather than a concern.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

If provenance matters, verify the publisher and review the bundled script before using the optional command-line helper.