Tool Battery Charging Roster

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteMedium Confidence

ASI03: Identity and Privilege Abuse

What this means

If an install or runtime prompt asks for credentials, payment, or purchasing authority, that would be outside the visible purpose of this skill.

Why it was flagged

These sensitive capability signals are not expected for a prompt-only charging-roster skill and conflict with the provided no-credential/no-network metadata, but the supplied files do not show actual credential handling, purchasing, or crypto behavior.

Skill content

- crypto
- can-make-purchases
- requires-sensitive-credentials

Recommendation

Use it only as a document-only prompt flow and do not grant credentials, payment, or purchase permissions unless the publisher explains and corrects the mismatch.