AI Opportunity Scout
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A poorly handled niche string could lead to incorrect command behavior, and the user should know local CLI tools may be invoked for research.
The skill instructs the agent to run local CLI search commands using a user-adapted niche. This is central to the skill's purpose, but the agent should keep the niche safely quoted/sanitized and avoid broad or unrelated command execution.
bird search "[niche] need OR wish OR looking for OR frustrated" --limit 20
Use the skill only for intended market-research queries, avoid putting secrets in the niche text, and ensure any local CLI tools used are trusted.
The skill may fail or behave differently depending on what local commands are installed on the user's system.
The metadata does not declare dependencies, while the workflow references commands such as python3, bird, and clawdhub. This is not malicious, but it leaves setup/provenance of those helper tools outside the skill package.
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Verify that any referenced CLI tools are installed from trusted sources before using the skill.
Search terms, including any sensitive niche description the user provides, may be sent to external providers.
The skill intentionally sends the user's niche and related research queries to external search/social/product-discovery services. This is disclosed and purpose-aligned, but it is still an external data flow.
Web (via web_search tool): ... site:reddit.com [niche] need OR wish OR looking for ... site:producthunt.com [niche]
Do not use confidential project names, private customer details, or sensitive business plans as search terms unless you are comfortable sending them to external search services.