Report Generator Adarsh

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent report-generation skill, with disclosed OpenAI use and only purpose-aligned notes about API-key configuration and sending audit data to that provider.

Before installing, confirm you are comfortable providing an OpenAI API key and sending the aggregated marketing audit data to OpenAI. Treat the returned rawData/report output as potentially sensitive business data.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may require providing an OpenAI API key and may spend from that account.

Why it was flagged

The skill expects an OpenAI API key. That is necessary for the stated OpenAI call, but it is still a credential that can incur charges or use the user's OpenAI account; the registry metadata did not declare required env vars.

Skill content
**Auth:** `OPENAI_API_KEY`
Recommendation

Configure the API key intentionally, use a dedicated or restricted key if available, and set provider-side budget or usage limits.

What this means

Marketing audit inputs, including social, ads, keyword, competitor, and website-audit data, may be shared with OpenAI during report generation.

Why it was flagged

The artifact explicitly sends the complete aggregated audit data to an external model provider. This is aligned with the report-generation purpose, but it crosses a data boundary.

Skill content
**API:** OpenAI ... User message is the full AuditData JSON
Recommendation

Only provide data you are allowed to send to OpenAI, redact confidential fields if needed, and follow the provider's data-retention and privacy policies.