fusion-bench

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: fusion-bench Version: 1.0.0 The fusion-bench skill bundle is a legitimate integration for the FusionBench model merging toolkit (arXiv:2406.03280). The SKILL.md file contains standard documentation, installation instructions via pip, and CLI usage examples consistent with the tool's purpose. There are no signs of data exfiltration, malicious execution, or prompt injection attacks.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the package will add and run third-party Python code in the user's environment.

Why it was flagged

The skill tells users to install an external Python package from PyPI, and the command is not version-pinned. This is purpose-aligned for a FusionBench skill, but it means local execution depends on the external package supply chain.

Skill content
PyPI: `pip install fusion-bench`
Recommendation

Install in a virtual environment, verify the package source, and pin a known-good version if reproducibility or supply-chain control matters.

What this means

Running the examples may execute local Python code, load models, consume compute resources, and create experiment outputs.

Why it was flagged

The skill provides shell commands to run FusionBench locally. This is central to the skill's stated purpose and is presented as user-directed usage, not hidden automatic execution.

Skill content
fusion_bench method=task_arithmetic modelpool=clip-vit-base-patch32 taskpool=clip-vit-base-patch32_8tasks
Recommendation

Review commands before running them, use an isolated project environment, and confirm model/config choices before launching large experiments.