Depin Project Evaluator

AdvisoryAudited by Static analysis on May 7, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If these signals were enforced as real permissions, the skill would be asking for far more authority than it needs.

Why it was flagged

These high-impact permission signals are not needed for an instruction-only educational evaluator and conflict with SKILL.md's stated no-wallet/no-secret boundaries. No actual code, credential requirement, or signing workflow is present, so this is treated as a permission-signal mismatch rather than observed wallet behavior.

Skill content
requires-wallet; can-make-purchases; can-sign-transactions; requires-sensitive-credentials
Recommendation

Do not grant wallet, signing, purchase, or sensitive-credential permissions to this skill; verify or correct the capability metadata before installing if the platform presents those permissions.