Document Signature Packet Builder

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If any installer or runtime prompt unexpectedly asks for wallet, payment, or sensitive credentials, that would not match the reviewed artifacts.

Why it was flagged

These automated capability signals would be high-impact if real, but they conflict with the provided requirements and skill.json, which show no credentials, no network, and no executable code. This appears to be an unsupported metadata/signal mismatch rather than actual skill behavior.

Skill content
Capability signals: crypto; requires-wallet; can-make-purchases; requires-sensitive-credentials
Recommendation

Use the skill as a prompt-only checklist and do not provide wallet credentials, payment credentials, or full identity numbers unless a separate trusted workflow clearly requires them.