Gift Genius

PassAudited by ClawScan on May 1, 2026.

Overview

Gift Genius appears to be a benign gift-recommendation skill that uses a disclosed product-search API, with an optional checkout step users should confirm before use.

This skill appears safe to use for curated gift browsing. Treat it as a merchant-specific shopping assistant, avoid sharing unnecessary personal details, and only allow checkout after reviewing the selected item, quantity, price, and merchant.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The assistant may be able to create or start a merchant checkout for selected items.

Why it was flagged

The skill documents a POST request that can start a checkout flow. This is purpose-aligned for a shopping assistant and the example conversation asks whether to start checkout, but users should ensure the agent does not initiate checkout without explicit approval.

Skill content
curl -s -X POST "https://dashboard.airshelf.ai/api/merchants/MERCHANT_ID/checkout"
Recommendation

Confirm the exact product, quantity, price, delivery assumptions, and merchant before allowing any checkout action.

What this means

Personal gift preferences or budget details may be shared with the product-search service.

Why it was flagged

Gift preferences, approximate budget, and recipient-related search terms are sent to the external dashboard.airshelf.ai API. This is disclosed and necessary for the recommendation function, but it is still an external data flow.

Skill content
curl -s "https://dashboard.airshelf.ai/api/search?q=QUERY&merchant_ids=MERCHANT_ID&min_price=MIN&max_price=MAX&limit=5"
Recommendation

Avoid including highly sensitive personal details in gift queries, and review results before clicking or purchasing.