Morning Med Spot Check Card
PassAudited by ClawScan on May 11, 2026.
Overview
This prompt-only printable checklist skill appears benign, with only minor metadata inconsistencies to notice.
This skill is safe to use as a simple printable reminder card. It should not ask for medication details, medical advice, passwords, wallet information, API keys, or files. If it ever requests credentials or medical decisions, do not provide them and use clinician or pharmacist guidance for medication questions.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could be confused by the wallet/credential signals, but the skill itself does not show any need for credentials.
These capability signals imply wallet or sensitive-credential handling, but the supplied skill files and requirements do not request or use any credentials. This appears to be a metadata/signal mismatch rather than actual credential access.
- crypto - requires-wallet - requires-sensitive-credentials
Do not provide wallet keys, passwords, tokens, or other sensitive credentials to this skill; the publisher should correct the capability signals if they are erroneous.
The mismatch may make it slightly harder to confirm which version of the prompt you are reviewing.
The registry version and packaged file version do not match. Because this is instruction-only with no code or install step, the security impact is low, but it is a provenance consistency issue.
Registry metadata: Version: 1.0.1; skill.json: "version": "1.0.0"
Publisher should align the registry and file versions; users can still review the included prompt text directly before use.