Skill Search Optimizer
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
If followed, the command may download or run the current MoltHub CLI and make a registry search request.
Why it was flagged
The skill is instruction-only but documents running an unpinned latest-version CLI package through npx. This is aligned with testing registry search, but it means the executed package version can change.
Skill content
metadata: {"clawdbot":{"emoji":"🔎","requires":{"anyBins":["npx"]},"os":["linux","darwin","win32"]}} ... npx molthub@latest search "your query"Recommendation
Run the npx command only when you intend to test search, and prefer a pinned or trusted CLI version if reproducibility matters.