Go Jek

PassAudited by VirusTotal on May 5, 2026.

Overview

Type: OpenClaw Skill Name: go-jek Version: 1.0.0 The skill bundle contains purely informational content regarding the history, business model, and ecosystem of the Indonesian company Gojek. There is no executable code, no prompt injection attempts, and no suspicious metadata across the SKILL.md or _meta.json files.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If the platform treats these capability labels as real permissions, the skill could appear to need more sensitive authority than its informational purpose requires.

Why it was flagged

These signals describe high-impact wallet, purchase, and credential-related capabilities, but the actual SKILL.md content is informational and the requirements declare no credentials. This appears unsupported by the visible skill behavior, but users should still notice the mismatch.

Skill content

- crypto
- requires-wallet
- can-make-purchases
- requires-sensitive-credentials

Recommendation

Install or use it only as a read-only informational skill; do not provide wallet, payment, or sensitive credentials unless a future version clearly justifies and scopes that access.