Options Payoff
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteMedium Confidence
ASI04: Agentic Supply Chain VulnerabilitiesWhat this means
A user may have less ability to independently verify where the skill came from before installing it.
Why it was flagged
The README documents a user-directed install command from an external repository/package path, while the registry metadata reports an unknown source and no homepage. This is not hidden or automatic, but users should recognize the provenance is not strongly established.
Skill content
npx skills add himself65/finance-skills --skill options-payoff
Recommendation
Install only from a trusted registry or repository, and prefer a pinned or clearly documented source when available.