SDS/MSDS Risk Scanner

Extract hazard codes and safety info from chemical safety datasheets.

This skill appears to be a small, local SDS text parser and is internally coherent and low-risk as packaged. However, the shipped script is effectively a demo: it implements --demo output but does not open or process an --sds input file despite the SKILL.md examples. Before relying on this skill: 1) Review/modify scripts/main.py to implement safe file reading if you intend to feed real SDS files (open files defensively, validate/sanitize paths to prevent ../ traversal). 2) Confirm there are no network calls added later and consider running the script in a sandboxed workspace when testing. 3) Add tests for edge cases and large files, and pin any future third-party dependencies. 4) If you plan to allow autonomous agent invocation, be comfortable that the agent may read/write workspace files per the instructions — restrict the workspace and run in a controlled environment. Overall, there are no red flags for credential exfiltration or hidden endpoints, but the functional mismatch (demo-only behavior) should be fixed before production use.

Type: OpenClaw Skill Name: sds-msds-risk-scanner Version: 1.0.0 The skill is a straightforward utility for extracting GHS hazard and precautionary codes from chemical safety datasheets using regular expressions. The Python script (scripts/main.py) contains no network activity, file system modifications, or obfuscated code, and the instructions in SKILL.md are strictly aligned with the stated purpose of safety data extraction without any evidence of prompt injection or malicious intent.