Go Jek
PassAudited by ClawScan on May 5, 2026.
Overview
This appears to be an informational Gojek research note with no code or install steps, though its capability labels mention wallet, purchase, and credential access that the skill content does not actually use.
This looks safe as a simple informational skill. Before installing, confirm the platform is not granting wallet, purchase, or credential permissions, because those labels are not needed for the skill as written.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the platform treats these capability labels as real permissions, the skill could appear to need more sensitive authority than its informational purpose requires.
These signals describe high-impact wallet, purchase, and credential-related capabilities, but the actual SKILL.md content is informational and the requirements declare no credentials. This appears unsupported by the visible skill behavior, but users should still notice the mismatch.
- crypto - requires-wallet - can-make-purchases - requires-sensitive-credentials
Install or use it only as a read-only informational skill; do not provide wallet, payment, or sensitive credentials unless a future version clearly justifies and scopes that access.