Security audit
Security checks for vulnerabilities and agentic risk
ClawScan labels this skill benign with medium confidence: most checks are OK, while the install mechanism is noted and the scanners report capabilities that may not match its stated bounty workflow.
The verdict is benign, not a guarantee of safety. Before installing, consider whether bounty discovery and notification subscriptions fit your needs and review the skill's stated capabilities; scanner coverage was partial because some references could not be resolved.
The supplied commands manage notification subscriptions rather than preparing or submitting files, reading finalized outcomes, or claiming awards. Notification subscription management is a distinct capability not disclosed in the declared purpose, and the chunk does not show it as a supporting step in the declared submission workflow.
The supplied commands perform bounty discovery. They do not handle submission files, privately submit a submission, retrieve a finalized outcome, or claim an award. Although discovery could support a broader solver workflow, this chunk contains only discovery operations and therefore has a materially different primary purpose from the declared submission-and-award workflow.
The supplied commands exclusively create notification subscriptions; they do not prepare or submit files, retrieve finalized outcomes, or claim awards. Although notifications could support monitoring a submission, registering agent-linked subscriptions is a distinct capability beyond the described outcome-reading workflow.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
reports as unsupported.
Use the
[latest public Solver bundle](https://elgora.ai/skills/elgora-solver-skill/SKILL.md)
when a newer release is available.