System Info

Security checks across malware telemetry and agentic risk

Overview

This skill is a simple system-diagnostics helper, with one minor provenance note because it documents a `system-info` command that is not supplied by the artifacts.

This appears safe for basic local diagnostics. The main thing to check is whether the `system-info` command actually exists and comes from a trusted source, since this instruction-only skill does not provide it.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

If a user or agent runs `system-info`, it will rely on whatever executable with that name is already available in the local environment.

Why it was flagged

The skill documents a local `system-info` command, but the provided artifacts contain no code files or install spec and only declare `free` as a required binary.

Skill content
```bash
system-info
system-info cpu
system-info mem
system-info disk
system-info uptime
```
Recommendation

Before use, confirm that `system-info` exists and is a trusted command, or ask the skill author to provide the expected implementation or declare the required binary explicitly.