Doctor of Credit
PassAudited by ClawScan on May 13, 2026.
Overview
This skill is a coherent public Doctor of Credit search/read integration, with the main caveat that it runs an external npm MCP package that was not included for code review.
This appears safe for searching and reading public Doctor of Credit content. Before installing, note that it uses an npm-hosted MCP server via npx, so you should trust the npm package and publisher even though no package code was included in this review.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or using the skill may download and run code from npm to provide the MCP tools.
The skill relies on running an external npm package through npx, but the package implementation is not included in the submitted artifacts and no pinned package version is shown.
mcpServers:\n doc-mcp:\n command: npx\n args: ["-y", "@guava-tech/doc-mcp"]
Only install if you trust the publisher/package source, and prefer a pinned or reviewed package version where possible.