Agent skill · Audited from source
Add Component
skill · agentforce314/clawcodexMIT licenceAudited 19 Oct 2026 · source 63a5da270dd1
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 63a5da270dd1 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Scaffold a new React component.
Cite
Cite this page
ModelsAtlas. “Add Component (agentforce314/clawcodex)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/agentforce314/add-component
Trust audit
Audit 0.4.1 · source read 19 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 1 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
LOWInventory / provenanceskill.no_frontmatter · SKILL.md:1
- Why
- SKILL.md lacks name/description frontmatter
- Fix
- —
Audit 0.4.1 · source sha 63a5da270dd1 · 19 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisheragentforce314 GitHub userOwner of the repository this skill is read from
- Source folderagentforce314/clawcodex/tests/fixtures/skills/frontend/add-componentThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict63a5da270dd1A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Scaffold a new React component.
--- description: Scaffold a new React component. arguments: [name] when_to_use: When the user asks to add a new React component. --- # Add Component Create `src/components/$name.tsx` and a matching test.
Excerpt, first 204 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 63a5da2
git clone https://github.com/agentforce314/clawcodex git -C clawcodex checkout 63a5da270dd1
The author documents no install command, so this uses the repository directly. Our verdict covers commit 63a5da270dd1 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
63a5da270dd1
Similar skills
All coding & review skills →agentforce314/clawcodex
Generate a conventional-commit message from staged changes.
agentforce314/clawcodex
Run lints on Python files.
rtk-ai/rtk
Review RTK Rust code for idiomatic simplification. Detects over-engineering, unnecessary allocations, verbose patterns. Applies Rust idioms without changing behavior.
rtk-ai/rtk
Rust design patterns for RTK. Newtype, Builder, RAII, Trait Objects, State Machine. Applied to CLI filter modules. Use when designing new modules or refactoring existing ones.
rtk-ai/rtk
Issue triage: audit open issues, categorize, detect duplicates, cross-ref PRs, risk assessment, post comments. Args: "all" for deep analysis of all, issue numbers to focus (e.g. "42 57"), "en"/"fr" for language, no arg…
rtk-ai/rtk
CLI performance optimization - startup time, memory usage, token savings benchmarking
Questions about Add Component
What does the Add Component skill do?
Is Add Component safe to install?
What can Add Component access on my machine?
How current is this page?
Sources
- github.com/agentforce314/clawcodex/tree/main/tests/fixtures/skil — the audited source at commit 63a5da270dd1 and every finding aboveObserved · 19 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Add Component skill do?
- Is Add Component safe to install?
- What can Add Component access on my machine?