Pywayne Visualization Rerun Utils

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: rerun-utils Version: 0.1.0 The skill bundle provides static 3D visualization utilities using the Rerun SDK, as described in `SKILL.md`. The content of `_meta.json` is standard. The `SKILL.md` file serves as documentation, detailing how to use the visualization methods and mentioning the Rerun SDK dependency (handled by `gettool`). There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the AI agent. The `rr.init(..., spawn=True)` call is a legitimate function of the Rerun SDK to initialize its viewer.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may fetch and run third-party visualization code, so the package source and version matter.

Why it was flagged

The skill discloses that use depends on a third-party SDK that may be downloaded through gettool, while no install specification or pinned source is provided in the artifacts.

Skill content
- **Dependencies**: Requires Rerun SDK (auto-downloaded via `gettool`)
Recommendation

Verify the Rerun SDK/gettool source and version before use, and prefer pinned or trusted package sources where possible.

What this means

Running the documented setup may open or start a local Rerun viewer.

Why it was flagged

The example initializes Rerun with spawning enabled, which can start a local viewer process. This is expected for visualization but should be deliberate.

Skill content
rr.init('my_app', spawn=True)
Recommendation

Use this in an environment where launching the viewer is acceptable, and adjust Rerun initialization options if you do not want a spawned viewer.