Dao Treasury Literacy

PassAudited by ClawScan on May 7, 2026.

Overview

This is an instruction-only educational skill with clear no-wallet/no-code boundaries, though the supplied capability signals oddly mention wallet/signing access and should be treated as a metadata mismatch.

This appears safe to use as a read-only educational guide for DAO treasury proposals. Use it only with public or non-sensitive information, and do not connect a wallet or share any secrets; the wallet/signing capability signal appears inconsistent with the reviewed files.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

A user might be confused by the capability signal and think wallet access or sensitive credentials are needed, even though the skill documentation says they are not.

Why it was flagged

These supplied capability signals would be high-impact if accurate, but the reviewed skill files contain no code, no install mechanism, no required credentials, and explicit instructions not to connect wallets or sign transactions.

Skill content

- requires-wallet
- can-sign-transactions
- requires-sensitive-credentials

Recommendation

Do not provide seed phrases, private keys, wallet passwords, signing material, or wallet access to this skill. The publisher should correct the capability metadata/signals if they are visible to users or installers.