Satellite Tracker

PassAudited by ClawScan on May 8, 2026.

Overview

The skill appears to be a coherent satellite tracker, with minor things to verify: a manual Python dependency and a registry signal that oddly mentions sensitive credentials.

This looks safe for normal satellite tracking. Before installing, use a virtual environment for the sgp4 dependency and treat any request for API keys, tokens, or other credentials as unexpected unless separately documented by the maintainer.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If an installer or agent asks for tokens or credentials for this skill, that would not match the documented purpose.

Why it was flagged

The registry signal suggests sensitive credentials may be involved, but the supplied metadata says no primary credential or env vars are required and the SKILL.md says no API key is needed. This looks like a metadata inconsistency rather than observed credential use.

Skill content
Capability signals
- requires-sensitive-credentials
Recommendation

Do not provide credentials for this skill unless the maintainer clearly documents why they are needed; prefer using it as a no-API-key satellite tracker.

What this means

Installing the skill may add a third-party Python package to the local environment.

Why it was flagged

The skill depends on a third-party Python package installed manually. This is expected for SGP4 orbit prediction, but the dependency is unpinned and not represented by an install spec.

Skill content
pip install sgp4
Recommendation

Install sgp4 from a trusted PyPI source, preferably in a virtual environment, and pin or verify the version if reproducibility matters.