Regulatory Affairs Head

PassAudited by ClawScan on May 1, 2026.

Overview

This regulatory guidance skill is coherent and appears benign, with a minor note that its tracker script can store regulatory submission details in a local JSON file.

Before installing, note that the skill is for high-stakes regulatory work and should be used with qualified human review; if you use the included tracker, keep the generated local JSON file in a secure project location.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used, the tracker may store confidential regulatory or product-planning information on the local machine.

Why it was flagged

The tracker uses a default local JSON file to persist regulatory submission records, which can include product names, responsible persons, dates, and notes.

Skill content
def __init__(self, data_file: str = "regulatory_submissions.json")
Recommendation

Use the tracker only in an appropriate project directory, avoid entering unnecessary sensitive details, and protect or exclude the JSON file according to your company’s confidentiality practices.