Skill
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears purpose-aligned for Graz city information, with the main thing to notice being its reliance on an external npm CLI package.
This looks like a benign city-information helper. Before installing, be aware that it depends on the external @grazy/cli npm package and may query public data sources for transport, weather, news, events, and POI information.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or running the skill may execute code from the @grazy/cli npm package to fetch city information.
The skill depends on an external npm CLI package and documents global or npx-based execution, while the registry-level install spec is absent. This is aligned with the skill purpose but is still a supply-chain dependency users should notice.
"npmPackages": ["@grazy/cli"] ... "Installiert die grazy CLI global: npm install -g @grazy/cli"
Install only if you trust the npm package and repository, and prefer reviewing the package source or using npx intentionally when needed.