chill.institute
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A mistaken selection could add unwanted content to the user's put.io transfers.
The instructions allow the agent to choose a search result and initiate a transfer in the user's put.io account.
Pick the best result ... Click send to put.io.
Ask the agent to show the chosen result, size, quality, and source before clicking send.
The agent can perform the described transfer workflow using the active browser session.
The skill relies on a logged-in OAuth browser session to act on the user's put.io account.
User must be logged in to chill.institute (put.io OAuth in the browser).
Use an isolated browser profile, complete OAuth yourself, do not share passwords in chat, and log out or clear the session when finished.
Running this command executes code outside this instruction-only skill's artifact set.
The workflow includes an optional local shell command from a separate putio skill to verify transfers.
bash skills/putio/scripts/list_transfers.sh
Only run the verification command if the separate putio skill is installed from a trusted source and you are comfortable with its script.