evidence organizer
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
A user has less external information for independently verifying the publisher or source package before installation.
Why it was flagged
The registry metadata does not provide a verified source or homepage, which is a minor provenance gap. The visible package otherwise has no install script, dependencies, or suspicious static findings.
Skill content
Source: unknown Homepage: none
Recommendation
Install only from a trusted registry/account, and verify the package origin if you plan to rely on the bundled JavaScript helper.