YHD
PassAudited by ClawScan on May 1, 2026.
Overview
This shopping assistant is purpose-aligned and clearly says it stops before payment, though users should supervise any logged-in cart and order-preview actions.
This skill appears safe for its stated shopping purpose, but treat logged-in use as sensitive: supervise browser actions, require confirmation before cart or checkout-preview changes, and complete payment yourself only after reviewing all details.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could add items, apply coupons, or navigate checkout-preview pages during a shopping session, but the artifacts direct it to stop before payment.
The skill documents browser clicks that can change shopping-cart state and open an order preview, while also stating that payment is never automated.
browser.click(".add-to-cart-btn") ... browser.click(".checkout-btn") ... Payment | **Never** | User onlyAsk the agent to confirm before adding items, applying coupons, changing delivery options, or opening checkout preview, and review the final order manually.
Using the skill while logged in may expose shopping account details such as cart contents, coupons, delivery slots, selected address, and order totals to the agent workflow.
Several supported operations require a logged-in YHD account, giving the agent access to account-specific cart, coupon, delivery, and order-preview information.
| **Add to Cart** | ✅ Required | ... | **Apply Coupons** | ✅ Required | ... | **Generate Order Preview** | ✅ Required |
Log in only when you want the agent to help with account-specific shopping tasks, and personally verify cart contents, address, coupons, totals, and payment before completing any purchase.