Chiquita
PassAudited by ClawScan on May 2, 2026.
Overview
This is a text-only historical reference skill with no code, install step, credentials, or execution behavior; only the unexplained capability signals deserve a quick check.
This appears safe as a text-only reference skill. Before installing, you may want to verify why the registry lists crypto and purchase-related capability signals, because those do not match the visible SKILL.md content.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user might wonder why a historical banana-brand reference skill is associated with crypto or purchase-related capabilities, even though the supplied artifacts do not show any purchase or crypto action.
These capability signals are not reflected in the text-only Chiquita history content, which could confuse users about what authority or behavior the skill is meant to have.
Capability signals - crypto - can-make-purchases
Confirm whether these capability signals are registry noise or intentional; if intentional, the skill should clearly explain their purpose and limits before installation.