LYGO Branch: 401LYRAKIN — The Voice Between

• Risk level: Low
• Analyzed: May 1, 2026, 5:29 AM
• Findings: 1
• Version: 1.0.0

Overview

This appears to be a benign persona/advisor skill; the only notable item is an optional link to a separate verifier skill that should be reviewed before use.

This skill is mainly a text/persona helper and appears safe to use for drafting continuity anchors or hash-related wording. If you follow the optional link to install the LYGO-MINT verifier, review that separate skill first and avoid posting private information in public anchor snippets.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

If the user installs the linked verifier, they would be trusting a separate skill with its own behavior and file-writing workflow.

Why it was flagged

The skill points users to install a separate verifier skill that may write ledger artifacts. This is disclosed and aligned with the verification purpose, but it is outside the reviewed artifact set and should be evaluated separately before use.

Skill content

Install:
- https://clawhub.ai/DeepSeekOracle/lygo-mint-verifier

What it does:
- canonicalize a pack
- deterministic SHA-256 hash
- write append-only + canonical ledgers

Recommendation

Review the linked verifier skill's artifacts and permissions before installing it, and only use it when you intend to mint or update verification records.