Auto Estimate Generator

PassAudited by ClawScan on May 1, 2026.

Overview

This looks like a straightforward estimating assistant; it requests file access to read project QTO data, but the artifacts do not show credential use, hidden network calls, persistence, or destructive actions.

Before installing, confirm you trust the publisher and only let the skill work with the QTO, pricing, and estimate files needed for the project. Review generated estimates before using them for bids or financial decisions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The assistant may be able to read local files if directed to use them for estimating workflows.

Why it was flagged

The skill requests filesystem access. This is coherent with parsing user-provided QTO CSV/Excel data, but it is still a tool capability users should notice.

Skill content
"permissions": ["filesystem"]
Recommendation

Only provide the project files needed for the estimate and avoid granting access to unrelated sensitive folders.

What this means

The version mismatch may make it slightly harder to confirm exactly which packaged release is being reviewed or installed.

Why it was flagged

The registry metadata lists version 2.1.0, while claw.json lists 2.0.0, creating a small package metadata consistency issue.

Skill content
"version": "2.0.0"
Recommendation

Confirm the publisher and intended version before installation if version provenance matters for your workflow.