Inventory

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the inventory folder is exposed, synced, or shared unintentionally, someone could learn what valuables you own, where they are located, and identifying purchase or serial-number details.

Why it was flagged

The skill creates persistent local inventory records containing sensitive details about valuable items, where they are stored, and documentation such as receipts and serial numbers.

Skill content
Create `~/inventory/` as workspace ... Location: room, drawer, box, storage unit ... Serial numbers for electronics ... Receipt photos or PDFs linked
Recommendation

Keep the inventory folder private, consider encrypting or access-restricting it, and avoid storing more serial numbers, receipts, photos, or location detail than you need.