tableau

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only tableau helper is coherent and purpose-aligned, but users should notice that it tells the agent to create local files and run the tableauc converter.

This skill appears safe for its stated purpose, but it is designed to run the tableauc CLI and write generated files. Before installing, be comfortable with local file generation and use it in a clearly scoped workspace such as temp/ or a project directory under version control.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The agent may create or update local input, schema, and generated config files as part of answering tableau conversion questions.

Why it was flagged

The skill instructs the agent to run local tableauc CLI commands and generate outputs after file changes. This is central to the converter purpose, but it is still local tool execution that users should be aware of.

Skill content
Whenever you create or modify any input file ... always run both protogen and confgen immediately after ... tableauc -c config.yaml -m proto ... tableauc -c config.yaml -m conf
Recommendation

Use the skill in a disposable or version-controlled workspace, confirm the working directory when using real project files, and ensure tableauc is installed from a trusted source.