React Composition
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: react-composition Version: 1.0.0 The skill bundle provides educational content and code examples for React composition patterns. All `tsx` code snippets are illustrative, and the `SKILL.md` and `README.md` files contain no prompt injection attempts or instructions for the AI agent to perform malicious actions. Installation commands like `npx clawhub install` and `npx add` are standard methods for users to install skills or packages, and local `cp -r` commands are for manual installation, none of which indicate malicious intent within the skill itself. There is no evidence of data exfiltration, persistence, or unauthorized execution.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a user installs from the moving GitHub branch, they may not get exactly the same artifact that was reviewed here.
The README provides a user-directed install command that references a GitHub main-branch path rather than a pinned version or commit, so the fetched content could change over time.
npx add https://github.com/wpank/ai/tree/main/skills/frontend/react-composition
Prefer the reviewed registry artifact or a pinned commit/version when installing, and verify the source before running install commands.