Ai Productivity Audit

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill matches its AI-tool audit purpose, but users should recognize it is also a sales funnel for a paid Stack Builder and has minor package metadata inconsistencies.

This appears safe to use as an instruction-only audit helper. Before installing, understand that it is designed to promote a $19 paid Stack Builder and that its free recommendations are intentionally limited; verify any subscription-cancellation or upgrade advice yourself.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The user may receive useful audit feedback, but specific replacement recommendations are intentionally withheld unless they pay for the upgrade.

Why it was flagged

The artifact explicitly makes the free audit incomplete and directs users toward a paid product; this is disclosed, but it means the report is partly promotional.

Skill content
Do NOT give specific tool replacement recommendations in this free skill. Name the gap. Show the pain. Let the paid product solve it.
Recommendation

Treat the report as a starting point and marketing offer; independently verify any savings, gaps, or need for the paid upgrade before purchasing.

What this means

The package identity is not perfectly consistent across artifacts, although there is no code or install step that would execute from this package.

Why it was flagged

These internal metadata values differ from the supplied registry metadata, which lists a different owner ID, slug, and version, creating a provenance consistency issue.

Skill content
"ownerId": "kn7dnm73gpz6sx4eqvr7kjcm1h829be0", "slug": "ai-productivity-audit", "version": "1.1.0"
Recommendation

Confirm the skill listing, owner, and version in the registry before installing, especially if provenance matters for your environment.

What this means

If saved, the report could leave a local copy of the user's AI-tool stack, subscription costs, and workflow notes.

Why it was flagged

The skill may ask the agent to create a local report file, but only after the user requests saving and to a clearly scoped path.

Skill content
If the user wants to save the report: - Offer to write it to `~/ai-productivity-audit-[date].md`
Recommendation

Save the report only if you want a local copy, and choose a location appropriate for any sensitive business or budget details it contains.