red-team-pro

PassAudited by ClawScan on May 8, 2026.

Overview

This is an instruction-only adversarial review skill with no code or credential access; the only notable issue is a minor name/install mismatch to verify.

This skill appears safe as an instruction-only critique workflow. Expect blunt adversarial feedback by design. Before installing, confirm that the registry package you choose matches the intended skill name because the README install command references 'red-team' rather than 'red-team-pro'.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user following the README exactly might install a differently named skill than the one being reviewed.

Why it was flagged

The README install examples point to 'red-team', while the evaluated registry metadata names the skill 'red-team-pro'. This appears to be a packaging or naming inconsistency rather than malicious behavior, but it could confuse users about which artifact they are installing.

Skill content
npx @skill-hub/cli install red-team --agent claude
clawhub install red-team
Recommendation

Verify the package slug in the registry before installing, and update the README/SKILL metadata so the advertised name and install command match.