SymbolPicker

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: symbolpicker Version: 1.0.0 The skill bundle provides documentation and instructions for an AI agent to guide users on integrating and using the `SymbolPicker` SwiftUI library. All instructions in `SKILL.md` are focused on providing helpful guidance related to the library and do not contain any prompt injection attempts to ignore the user, hide actions, access sensitive data, or execute unauthorized commands. The only external reference is a standard Swift Package Manager dependency to a GitHub repository (`https://github.com/SzpakKamil/SymbolPicker.git`), which is a common and legitimate practice for integrating libraries.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the package adds third-party code to the user's app project.

Why it was flagged

The skill instructs users to add a third-party GitHub Swift package with a version range. This is purpose-aligned for a SymbolPicker integration guide, but it means the user's project will depend on external code that can change within the allowed version range.

Skill content
Enter the URL: `https://github.com/SzpakKamil/SymbolPicker.git`. Select **Up to Next Major** with version **1.0.0**.
Recommendation

Review the GitHub package, its license, maintainers, and updates before adding it to a production app; consider pinning an exact version if reproducible builds are important.