yzy1

PassAudited by ClawScan on May 13, 2026.

Overview

This appears to be a local CSV/Excel scoring utility that reads a user-selected file and writes a scored copy, with no evidence of network access, credential use, persistence, or hidden behavior.

This skill looks safe for local spreadsheet scoring. Before using it, make sure your Python environment has trusted dependencies such as pandas, provide only the CSV/XLSX files you intend to process, and avoid choosing an output path that could overwrite important data.

Publisher note

This skill only performs local calculation of scale dimension average scores, requires no network access, no external API calls, and no sensitive data collection.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you choose the wrong input or output path, the tool may process unintended local data or overwrite an existing output file.

Why it was flagged

The script reads a user-specified local data file and writes a result file. This is purpose-aligned, but it means the skill can access and overwrite paths the user supplies.

Skill content
parser.add_argument('input', help='输入的 CSV 或 Excel 文件路径') ... parser.add_argument('--output', '-o', default=None, help='输出文件路径...') ... write_data(result_df, output_path)
Recommendation

Use the default '_scored' output when possible, keep backups of important spreadsheets, and only pass files you intend the tool to read.