Anomaly Explainer

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the platform grants the declared bash tool, the agent may have local shell capability even though the skill does not appear to need it for its documented task.

Why it was flagged

The skill declares bash access even though the documented workflow is an instruction-only billing analysis and explanation process with no shell-command steps.

Skill content
tools: claude, bash
Recommendation

Use the skill for analysis of provided AWS cost data, and if your platform supports tool restrictions, consider disabling or reviewing shell access because it is not explained by the current instructions.