Lost Wallet Lockdown

AdvisoryAudited by Static analysis on May 13, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The checklist may guide the user to freeze cards, report IDs, or contact access offices; mistakes could disrupt access or accounts, so the user must verify each action themselves.

Why it was flagged

The workflow covers high-impact identity and financial-account actions, but explicitly keeps all institutional action with the user and official channels.

Skill content
This is a prompt-only administrative planning workflow. It does not contact banks, agencies, employers, transit providers, schools, building managers, police, merchants, or any institution on the user's behalf.
Recommendation

Use only official apps, statements, agency sites, or known contact channels, and do not give the agent passwords, PINs, codes, full account numbers, or full ID details.

What this means

Sensitive personal details could appear in the conversation or generated checklist if the user overshares.

Why it was flagged

The agent context may include sensitive location, wallet-content, ID, key, or access-badge information, but the prompt explicitly narrows inputs and discourages secrets.

Skill content
Ask only for minimal, non-secret facts. Encourage placeholders and redactions. ... Last known place, last confirmed time, and possible route since then. ... Wallet contents by category, not full numbers
Recommendation

Use categories and placeholders, keep the checklist private, and avoid entering full card numbers, IDs, account numbers, passwords, one-time codes, or unredacted document images.