Umbrella Readiness Check Card
AdvisoryAudited by Static analysis on May 12, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If an install or runtime prompt asks for credentials, that would be unexpected for this skill.
A sensitive-credential capability signal does not fit the umbrella checklist purpose and conflicts with the declared lack of credential requirements. The actual skill files also declare no credentials, so this is treated as a metadata/capability mismatch rather than evidence of credential handling.
Capability signals: requires-sensitive-credentials; Primary credential: none; Required env vars: none
Use the skill only as a prompt-only checklist and do not provide credentials; the publisher or registry should clarify or remove the inconsistent capability signal.