Bug Bash Facilitator

AdvisoryAudited by Static analysis on May 3, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could accidentally cause real billing, subscription, or account-state changes if they execute these test ideas in a live environment.

Why it was flagged

The skill includes billing and plan-change test scenarios. This is coherent for a bug bash, but if users follow these charters against production accounts, they could trigger real account or billing changes.

Skill content
BILLING: Explore plan upgrade/downgrade/seat changes with trial-to-paid, annual-to-monthly, prorated mid-cycle upgrade, and card decline mid-checkout, to discover charge correctness...
Recommendation

Use sandbox payment systems, seeded test accounts, and explicit approvals before testing upgrades, downgrades, seat changes, or checkout flows.

What this means

Users have less external context for vetting the publisher or reviewing project history.

Why it was flagged

The skill has limited provenance information. Because it is instruction-only with no code or install mechanism, this is a low-impact provenance note rather than a material concern.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the visible SKILL.md content before use, especially because no source repository or homepage is available.