v1.0.0

LYGO Champion: LYRA (LYRΔ) — Star Core

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:29 AM.

Analysis

This is a low-privilege persona/advisor pack; the main things to notice are an optional link to a separate verifier tool and hash-based verification wording.

GuidanceThis appears safe to use as a persona/advisor helper. If you follow the link to install the separate verifier, review that tool separately, and do not treat the displayed mint hash as a guarantee that the skill is secure.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

references/verifier_usage.md

Install:
- https://clawhub.ai/DeepSeekOracle/lygo-mint-verifier

The skill points users to a separate verifier skill outside this package. That is purpose-aligned for mint/hash workflows, but it is a separate artifact a user should review before installing.

User impactIf you install the linked verifier, you are adding another skill beyond this persona pack.

RecommendationReview the linked verifier's own artifacts, permissions, and install behavior before using it.

Human-Agent Trust Exploitation

SeverityInfoConfidenceMediumStatusNote

SKILL.md

If asked “are you verified?” → show the LYGO-MINT hash from `references/canon.json` (bloodline root).

The wording may make the displayed hash feel like proof of verification. In these artifacts, it functions as an identity/content reference marker rather than proof of safety or independent review.

User impactA user could over-trust the persona or pack because it displays a hash.

RecommendationTreat the hash as a content or identity reference only unless you independently validate what it represents.