AI Opportunity Scout

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears benign: it performs public market research and runs a simple local scoring script, but it relies on external search/CLI tools and sends search terms to third-party services.

This skill is reasonable for public market research. Before installing, make sure any referenced CLI tools are trusted and avoid entering confidential business ideas, customer names, or secrets as search terms.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A poorly handled niche string could lead to incorrect command behavior, and the user should know local CLI tools may be invoked for research.

Why it was flagged

The skill instructs the agent to run local CLI search commands using a user-adapted niche. This is central to the skill's purpose, but the agent should keep the niche safely quoted/sanitized and avoid broad or unrelated command execution.

Skill content
bird search "[niche] need OR wish OR looking for OR frustrated" --limit 20
Recommendation

Use the skill only for intended market-research queries, avoid putting secrets in the niche text, and ensure any local CLI tools used are trusted.

What this means

The skill may fail or behave differently depending on what local commands are installed on the user's system.

Why it was flagged

The metadata does not declare dependencies, while the workflow references commands such as python3, bird, and clawdhub. This is not malicious, but it leaves setup/provenance of those helper tools outside the skill package.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Verify that any referenced CLI tools are installed from trusted sources before using the skill.

What this means

Search terms, including any sensitive niche description the user provides, may be sent to external providers.

Why it was flagged

The skill intentionally sends the user's niche and related research queries to external search/social/product-discovery services. This is disclosed and purpose-aligned, but it is still an external data flow.

Skill content
Web (via web_search tool): ... site:reddit.com [niche] need OR wish OR looking for ... site:producthunt.com [niche]
Recommendation

Do not use confidential project names, private customer details, or sensitive business plans as search terms unless you are comfortable sending them to external search services.