Lunar Calendar Vietnam

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

For relevant calendar questions, the agent may run a local Node.js script instead of answering from memory.

Why it was flagged

The skill explicitly tells the agent to run a terminal command using the bundled Node.js calculator. This is central to the calendar-calculation purpose and is locally scoped, but users should notice that it involves command execution.

Skill content
Luôn luôn gọi terminal... node scripts/amlich_calculator.js --solar "2026-02-13"
Recommendation

Use the skill only if you are comfortable with local script execution, and keep invocations limited to the documented calculator command and date-style inputs.

What this means

Using or reinstalling the skill may rely on Node.js/npm and the pinned minimist package.

Why it was flagged

The CLI uses a third-party npm dependency. The lockfile provides a pinned version and integrity hash, so this is a normal dependency-awareness note rather than a concern.

Skill content
"node_modules/minimist": { "version": "1.2.8", "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", "integrity": "sha512-2yyAR8q..." }
Recommendation

Install dependencies from the lockfile when needed, and declare Node.js/npm requirements in metadata for clearer setup expectations.