Historical Cost Analyzer
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI02: Tool Misuse and ExploitationWhat this means
If granted file access, the agent may be able to read project cost files that could contain sensitive business information when the user asks it to analyze them.
Why it was flagged
Filesystem access is declared even though the skill is instruction-only; this is purpose-aligned with loading construction cost data, but it is still a capability users should notice.
Skill content
"permissions": ["filesystem"]
Recommendation
Only point the skill at the specific historical cost or estimate files you want analyzed, and avoid sharing unrelated confidential project data.