Property Tax Assessment Review Kit

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the platform were to request crypto, payment, or purchase-related permissions for this skill, those permissions would be unnecessary for the stated purpose.

Why it was flagged

These reported capability signals do not fit the document-only property-tax organizer purpose. No provided artifact shows actual tools, payment flows, crypto use, code execution, credentials, or network access, so this is a low-severity capability-signal mismatch rather than active unsafe behavior.

Skill content
- crypto
- can-make-purchases
Recommendation

Use the skill only as a prompt/document organizer and do not grant payment, purchase, crypto, network, or account permissions if prompted.

What this means

It may be harder to independently verify the exact published version or publisher source, but no executable payload is present in the provided artifacts.

Why it was flagged

The registry/package metadata has a minor version mismatch and limited provenance information. Because the package is prompt-only with no install step or executable code, this is a packaging/provenance note rather than a behavior concern.

Skill content
Registry metadata: Version: 1.0.1; Source: unknown; Homepage: none. skill.json: "version": "1.0.0"
Recommendation

Confirm that the installed package is the expected prompt-only version; no additional runtime permissions should be needed.