Anomaly Explainer
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the platform grants the declared bash tool, the agent may have local shell capability even though the skill does not appear to need it for its documented task.
The skill declares bash access even though the documented workflow is an instruction-only billing analysis and explanation process with no shell-command steps.
tools: claude, bash
Use the skill for analysis of provided AWS cost data, and if your platform supports tool restrictions, consider disabling or reviewing shell access because it is not explained by the current instructions.
