v1.0.0

Central de Deudores BCRA

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:49 AM.

Analysis

This instruction-only skill appears purpose-aligned for checking BCRA debt records, but it handles sensitive tax identifiers and credit/debt information.

GuidanceBefore installing, consider whether you are comfortable using a skill that looks up public BCRA credit/debt information by tax ID. Use it only when the user has a legitimate reason to check that identifier, and be careful when sharing the returned financial details or using the optional non-BCRA web link.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

SKILL.md

**Base URL**: `https://api.bcra.gob.ar` ... **Input**: CUIT/CUIL/CDI ... **Optional web interface**: `https://compara.ar/deudores/:cuit`

The skill uses external services with a tax identifier and presents returned names, debt status, and rejected-check details. This is disclosed and purpose-aligned, but the information is sensitive.

User impactA person's or company's tax ID and credit/debt information may be queried through an external service and shown in the conversation.

RecommendationUse the skill only for legitimate, user-requested checks; verify the identifier before querying; avoid sharing results unnecessarily; prefer the official BCRA API unless intentionally using the optional third-party UI.