Community Token Health Check

AdvisoryAudited by Static analysis on May 7, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If an installer or runtime later asks for wallet access, transaction signing, or sensitive credentials, that would contradict the reviewed skill materials.

Why it was flagged

These supplied signals would imply sensitive wallet or credential authority, but the actual SKILL.md, requirements, and skill.json do not request or implement that authority. The mismatch is worth noticing, but it is not evidence of wallet access in the reviewed artifacts.

Skill content
requires-wallet; can-sign-transactions; requires-sensitive-credentials
Recommendation

Use the skill only as an educational checklist and do not provide seed phrases, private keys, wallet passwords, signing approvals, or other secrets.