mao-methodology
PassAudited by ClawScan on May 13, 2026.
Overview
The visible artifacts are a coherent instruction-only methodology skill with no credentials, network access, persistence, or hidden execution, aside from a small note about an optional Python helper dependency.
This appears safe to install if you want Mao-derived analysis templates and methodology guidance. If you run the optional extraction script, only point it at documents you intend to process and install python-docx from a trusted source. Review is based on the visible supplied SKILL.md content and full included auxiliary files.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you choose to run the helper script, you may need to install an extra Python package from your package source.
The optional helper script relies on the python-docx package even though the install information declares no install spec or required binaries. This is not automatically executed and is aligned with parsing .docx files, but it is an undeclared, unpinned dependency users may install manually.
print("ERROR: python-docx not installed. Run: pip install python-docx")Run the helper only when needed, install dependencies from a trusted source, and prefer a pinned/declared dependency if the publisher updates the skill.