Umbrella Readiness Check Card
PassAudited by ClawScan on May 12, 2026.
Overview
This appears to be a prompt-only household umbrella checklist, with one registry/capability signal that oddly mentions sensitive credentials even though the files request none.
This skill looks safe to use as a simple household checklist. It should not need code execution, network access, files, accounts, or credentials; if anything asks for those, decline and treat it as inconsistent with the provided artifacts.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If an install or runtime prompt asks for credentials, that would be unexpected for this skill.
A sensitive-credential capability signal does not fit the umbrella checklist purpose and conflicts with the declared lack of credential requirements. The actual skill files also declare no credentials, so this is treated as a metadata/capability mismatch rather than evidence of credential handling.
Capability signals: requires-sensitive-credentials; Primary credential: none; Required env vars: none
Use the skill only as a prompt-only checklist and do not provide credentials; the publisher or registry should clarify or remove the inconsistent capability signal.