Tech Stack Evaluator

Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating te...

This package appears to be a legitimate tech-evaluation tool, but there is a mismatch between the SKILL.md (which shows convenient CLI usage and implies automatic fetching of GitHub/npm/security data) and the provided Python modules (which look like library components that expect structured input). Before using it in production or granting it network/agent privileges: 1) Inspect the remaining scripts (especially security_assessor.py and stack_comparator.py) for any network calls, subprocess usage, or hidden endpoints (look for imports like requests, urllib, subprocess). 2) Confirm whether CLI wrappers or data-fetching code are present or must be added — the examples may be aspirational. 3) Run the scripts in an isolated environment with the provided sample inputs to verify behavior. 4) If you expect live metric collection, ask the author for documentation on authentication and endpoints; do not provide credentials until you confirm what is contacted and why. If you want, I can scan the remaining truncated files for network/subprocess calls and make the assessment more precise.

Type: OpenClaw Skill Name: tech-stack-evaluator Version: 2.1.1 The tech-stack-evaluator bundle is a legitimate tool designed for technology comparison, TCO calculation, and migration analysis. All analyzed Python scripts (such as stack_comparator.py, tco_calculator.py, and security_assessor.py) contain pure mathematical and logical implementations for scoring metrics based on provided input data. There is no evidence of network activity, shell execution, data exfiltration, or obfuscation. The SKILL.md instructions are strictly functional and do not attempt to manipulate the AI agent into performing unauthorized or harmful actions.