Software License Manager

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is purpose-aligned for software license audits, but users should scope sensitive business data and separately approve any account or billing changes.

This skill appears safe as an instruction-only audit framework. Before using it, decide which license, spend, contract, employee-seat, and usage data the agent is allowed to review, and require human approval before taking any real-world actions such as canceling subscriptions, removing users, or changing license tiers.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If connected to real SaaS administration tools, these actions could affect employee access or billing.

Why it was flagged

These are high-impact license and billing remediation ideas if carried out, but the artifact presents them as a cost optimization playbook and does not provide tools, credentials, or automatic execution instructions.

Skill content
Remove departed employee seats ... Cancel unused trials and forgotten subscriptions ... Downgrade over-provisioned tiers
Recommendation

Use the skill for analysis and recommendations, and require explicit human approval before canceling subscriptions, removing seats, or changing license tiers.

What this means

The agent may need access to internal license inventories, vendor contracts, spend data, and usage metrics to produce useful results.

Why it was flagged

The intended audit may use organization-wide subscription, spend, and usage information. This is aligned with the skill's purpose, but it is sensitive business context that should be scoped to authorized data.

Skill content
Catalog every SaaS subscription, perpetual license, and open-source dependency across the org ... Current spend ... Actual usage — DAU/MAU
Recommendation

Provide only data the user is authorized to share, redact unnecessary personal or contractual details, and avoid granting administrative account access unless needed for a specific approved task.