Cogdx

PassAudited by ClawScan on May 1, 2026.

Overview

CogDx appears to be a coherent paid API client for cognitive diagnostics, with the main considerations being external sharing of agent outputs/reasoning and use of a wallet-linked account.

Install only if you are comfortable using a wallet-linked paid service and sending selected prompts, outputs, reasoning traces, and feedback to api.cerebratech.ai. Consider using a dedicated wallet/account, setting agent rules to ask before paid calls, and removing confidential information before submission.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

It may be harder to confirm who operates the service, what code is canonical, or what privacy/payment terms apply.

Why it was flagged

The registry metadata does not provide a source repository or homepage for independently verifying this paid external API integration.

Skill content
Source: unknown
Homepage: none
Recommendation

Verify the provider and service terms before relying on the skill for sensitive reasoning audits or paid usage.

What this means

API calls may consume credits tied to the configured wallet, and the wallet address is shared with the provider.

Why it was flagged

The client uses a wallet/account identifier for authenticated credit/payment-related API calls.

Skill content
self.wallet = wallet or os.environ.get("COGDX_WALLET") ... "X-WALLET": self.wallet
Recommendation

Use a dedicated wallet or account identifier, monitor credit usage, and do not provide private keys or seed phrases.

What this means

Sensitive task content included in diagnostics could leave the local environment and be associated with the wallet/account.

Why it was flagged

The diagnostic methods send user-supplied prompts, outputs, claims, context, or reasoning traces to an external provider.

Skill content
BASE_URL = "https://api.cerebratech.ai" ... requests.post(... json=data, timeout=30)
Recommendation

Sanitize confidential prompts, responses, and reasoning before submission, and review the provider's privacy/retention terms.

What this means

Feedback comments or reasoning may be retained or reused, and inaccurate feedback could influence shared diagnostic behavior.

Why it was flagged

The skill explicitly states that submitted feedback contributes to a shared system used by other agents.

Skill content
Feedback earns you credits AND improves detection for everyone. Shared reality across agents.
Recommendation

Submit only non-sensitive, high-quality feedback and avoid treating shared consensus results as authoritative without review.