v1.0.0

South African Tax Article Generator

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 6:23 AM.

Analysis

This appears to be a simple local article generator that does not request credentials, install dependencies, or make network calls.

GuidanceThis skill looks safe to review and use locally, but verify the generated tax content against official SARS sources before publishing, and choose the output folder deliberately.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

index.py

parser.add_argument('--output', default='./output') ... os.makedirs(args.output, exist_ok=True) ... with open(filepath, 'w') as f:

The script can create an output directory and write a generated JSON file there. This is expected for an article generator and is user-directed through the '--output' argument.

User impactThe skill may create local output files where the user points it.

RecommendationRun it with an output directory you control and review generated files before publishing or sharing them.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown; Homepage: none

The registry metadata does not provide a public source or homepage for provenance review. The included artifacts are small and do not show risky install behavior, so this is only a provenance notice.

User impactUsers have less external context for who maintains the skill or where the code originated.

RecommendationReview the included code and publisher identity before relying on it, especially for compliance-related content.

Human-Agent Trust Exploitation

SeverityLowConfidenceMediumStatusNote

SKILL.md

- Ensure SARS deadline accuracy and compliance information

The skill claims accuracy for tax compliance content, while the artifacts show static built-in article templates rather than official SARS validation or live data checks.

User impactGenerated tax articles could be treated as authoritative even though the artifacts do not show a mechanism for verifying current SARS rules or deadlines.

RecommendationHave a qualified person verify all SARS deadlines, penalties, and compliance statements before publishing or using the content operationally.