v1.0.0

Realtime React Hooks

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:32 AM.

Analysis

This is an instruction-only React patterns skill with no credentials or executable code; users should only verify the optional npx/GitHub install command before running it.

GuidanceThis skill appears safe for normal use as a React real-time hooks reference. Before running any npx installation command from the README, verify that the referenced repository and package source are the ones you intend to trust.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

README.md

npx add https://github.com/wpank/ai/tree/main/skills/realtime/realtime-react-hooks

The README provides a user-run installation command that fetches from a GitHub path via npx while the registry source is listed as unknown. It is disclosed and not automatic, but it is still a source users should verify before executing.

User impactIf a user follows this install command, they may run a package manager helper and fetch content from a remote repository.

RecommendationPrefer the trusted registry install path when possible, or inspect and verify the GitHub source before running npx-based install commands.