Luke Agent Directory
PassAudited by ClawScan on May 1, 2026.
Overview
This is an instruction-only directory that fetches public service listings and appears benign, but linked skill files are external and the package labels are inconsistent.
This skill appears safe as a simple directory, but do not treat linked services as automatically trusted. Review each linked skill.md separately, verify the domain, and require confirmation before granting credentials, installing tools, or allowing account-changing actions.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user or agent could be led from this directory to another service's skill instructions that have not been reviewed as part of this package.
The directory intentionally depends on live remote listings and linked third-party skill files. That is purpose-aligned, but those remote artifacts can change outside this review and should not be treated as pre-approved.
1. **Discover** — `curl ctxly.com/services.json` 2. **Learn** — Fetch the skill.md for services you need 3. **Use** — Follow the skill.md to integrate
Treat each fetched service skill.md as a separate artifact: verify the domain, review requested permissions, and ask for user confirmation before installing code, granting credentials, or taking account-changing actions.
The package identity and version labels are not fully consistent, which can make it harder to confirm exactly which release or owner produced the artifact.
The included _meta.json version differs from the registry version 1.0.0 and SKILL.md version 1.1.0, and the ownerId differs from the registry owner ID. This is a provenance/version labeling inconsistency, though no executable code or credential handling is present.
"ownerId": "kn7ctmcvasdjrfgaqn17gdqevx8095rt", "slug": "luke-agent-directory", "version": "1.2.0"
Confirm the intended publisher and current version from the registry or homepage before relying on the directory as an authoritative source.