Chiquita
AdvisoryAudited by Static analysis on May 2, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user might wonder why a historical banana-brand reference skill is associated with crypto or purchase-related capabilities, even though the supplied artifacts do not show any purchase or crypto action.
These capability signals are not reflected in the text-only Chiquita history content, which could confuse users about what authority or behavior the skill is meant to have.
Capability signals - crypto - can-make-purchases
Confirm whether these capability signals are registry noise or intentional; if intentional, the skill should clearly explain their purpose and limits before installation.