Evolution Drift Detector
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned and instruction-only, with only minor user-notice items around network-capable tooling and limited provenance.
This looks safe to install as an instruction-only drift-analysis helper. Before using it, be aware that lineage checks may involve external marketplace or URL lookups, and verify important results against the actual skill metadata because the source provenance is limited.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may cause the agent to query marketplace or URL-based lineage data, but the artifact does not show credential use, local data collection, or account mutation.
The skill declares network-capable and scripting binaries and describes lineage lookups from marketplace identifiers or URLs. This is coherent with the drift-detection purpose, but users should notice that use may involve external metadata requests.
requires:
bins: [curl, python3]
...
- A skill slug or identifier to trace its full lineage
- A marketplace inheritance chain URLUse it with public or intended-to-share skill identifiers and confirm any sensitive marketplace URL or private lineage data before lookup.
There is less external context to verify authorship or maintenance history, but the provided artifacts do not include hidden code or install-time execution.
The registry provides limited upstream provenance, though the supplied package is instruction-only and contains no executable code or installer.
Source: unknown Homepage: none ... No install spec — this is an instruction-only skill. No code files present
Review the SKILL.md instructions directly and do not treat any produced drift report as authoritative without checking the underlying marketplace metadata.