Ai Draft Polish Card
PassAudited by ClawScan on May 12, 2026.
Overview
This appears to be a prompt-only draft-polishing skill with no code or network access, though its registry capability signals and version metadata have minor inconsistencies to verify.
This skill looks safe for ordinary draft polishing. Avoid pasting unnecessary secrets or highly confidential material, and verify that the platform does not ask you to grant unrelated purchase, payment, crypto, or account permissions.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the platform would grant any purchase or crypto-related authority, that would be unnecessary for a writing-polish skill.
These capability signals are unrelated to the stated draft-polishing purpose. The artifacts do not show code, credentials, or instructions that would actually use those capabilities, so this is a permission-boundary note rather than a demonstrated unsafe behavior.
- crypto - can-make-purchases
Install only if the platform does not request extra purchase, wallet, payment, or crypto permissions for this skill; the publisher should remove or explain the signals.
A version mismatch can make it harder to confirm exactly which package version was reviewed.
The registry metadata for the evaluated package lists version 1.0.1, while the included manifest declares 1.0.0. This is a minor provenance/packaging inconsistency, not active malicious behavior.
"version": "1.0.0"
The publisher should align the registry version and skill.json version before relying on version-based review or change tracking.