v1.0.0

Salary Intelligence

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:56 AM.

Analysis

This instruction-only skill coherently provides salary and labor-market data through disclosed external SputnikX API/MCP endpoints, with no code, credentials, local access, or persistence shown.

GuidanceThis skill appears benign and instruction-only. Before installing, be aware that it relies on SputnikX-hosted API/MCP endpoints and labels several requests as $0.10 x402 calls, so only use it if you are comfortable with the external provider, possible per-call charges, and sharing the query terms you submit.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

### Salary Overview ($0.10 x402)
```bash
curl "https://sputnikx.xyz/api/v1/agent/salary/overview"
```

The skill documents external API calls that appear to involve a small x402 payment per request. This is disclosed and purpose-aligned, but users should approve paid requests.

User impactUsing the skill may send requests to a third-party service and may incur small per-call charges if x402 payment is enabled.

RecommendationConfirm that you are comfortable with the external service and any per-request cost before allowing the agent to call these endpoints.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

SKILL.md

Endpoint: https://mcp.sputnikx.xyz/mcp
Tools: salary_overview, salary_ai_risk, salary_lv_wages

The skill exposes an external MCP endpoint for agent-tool interaction. This is consistent with the skill’s data-query purpose, but user queries will be routed to that external provider.

User impactSalary research queries and parameters may be shared with the external MCP/API provider.

RecommendationAvoid sending private personal, employee, or confidential compensation data unless you trust the provider and understand its data handling.