ESLint Config Generator

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a simple ESLint configuration generator, with only expected project-file changes and optional dependency-install guidance shown.

This looks safe for its stated purpose. Before using it, make sure you are in the correct project folder and review any existing ESLint configuration or dependency changes it may create.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

Running the skill may change a project's lint configuration file.

Why it was flagged

The script writes directly to .eslintrc.json in the current working directory, which is expected for this skill but could replace an existing ESLint configuration.

Skill content
cat > .eslintrc.json << JSON
Recommendation

Use it in the intended project directory and review or back up any existing .eslintrc.json before running it.

#
ASI05: Unexpected Code Execution
Info
What this means

If the user chooses to run the dependency installation command, it will modify the project's development dependencies.

Why it was flagged

The documentation includes a developer-dependency installation command. This is expected for an ESLint setup helper and is presented as user-facing setup guidance.

Skill content
npm install -D eslint eslint-config-airbnb eslint-plugin-react
Recommendation

Review dependency changes before committing them, especially in shared or production repositories.