Data Lineage Tracker

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent data-lineage helper, with the main cautions being broad filesystem access for user-provided files and a minor version mismatch in its metadata.

This appears safe to use for its stated purpose. Before installing, confirm the version mismatch is expected and only let it process project files or export outputs in locations you choose.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If granted broadly, the agent may access local project files while processing lineage inputs or exports.

Why it was flagged

Filesystem permission can allow reading or writing local files; this is aligned with the skill's file-processing/export purpose, but it is still a capability users should notice.

Skill content
"permissions": [
    "filesystem"
  ]
Recommendation

Use explicit user-selected paths, review export destinations, and avoid pointing the skill at unrelated private directories.

What this means

A version mismatch can make it harder to confirm exactly which release is installed.

Why it was flagged

The registry metadata reports version 2.1.0, while the included claw.json reports 2.0.0; this mismatch is a minor provenance/version consistency issue.

Skill content
"version": "2.0.0"
Recommendation

Verify the publisher/package version before installation or ask the maintainer to align the registry and manifest versions.