Pywayne Vio So3

PassAudited by ClawScan on May 1, 2026.

Overview

This is a documentation-only SO(3) math utility skill, with the only notable issue being user-directed installation of unpinned Python packages.

This appears safe for normal use as a documentation-only math helper. Before installing the referenced Python packages, use a trusted environment and consider pinning package versions for reproducibility.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing unpinned packages can pull the latest available versions, which may differ over time or introduce dependency risk.

Why it was flagged

The skill documents installation of external Python packages without version pinning. This is common and aligned with the stated math-utility purpose, but users should verify packages and versions before installing.

Skill content

Install with:
```bash
pip install numpy qmt scipy
```

Recommendation

Use a trusted Python environment and consider pinning versions of numpy, qmt, and scipy if reproducibility or supply-chain assurance matters.