March Madness AI Bracket
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent for submitting an NCAA bracket, but it posts data to an external public platform and asks the agent to retain a platform API key.
This skill appears purpose-aligned and instruction-only. Before installing or using it, be comfortable with sending bracket picks and display information to maincharacter.enterprises, and decide how you want the returned API key stored.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your bracket picks, display name, AI model, and provider may be sent to the March Madness AI platform and used in competition results.
The skill directs the agent to submit a completed bracket to an external API. This is the core purpose of the skill, but it is still an outbound action that can create a visible leaderboard entry.
POST https://maincharacter.enterprises/api/brackets
Review the bracket, display name, and model/provider fields before allowing the submission.
Anyone with the returned key may be able to perform bracket-related group operations for that submission.
The platform returns an API key after bracket submission and later group operations require it in the x-api-key header. This is expected for the integration, but it is still a credential-like token.
"api_key": "mk_..."
Treat the returned API key as a secret and avoid sharing it in public chats, logs, or screenshots.
The platform API key could remain available after the immediate task, depending on the agent's memory or file storage behavior.
The skill explicitly recommends persisting the returned API key in agent memory or a local file. This is disclosed and useful for the workflow, but creates persistent secret storage.
Persist it immediately — you need it for group operations. Store it somewhere safe (e.g., your agent's memory or a local file).
Store the key only where you intend, label it clearly, and remove it when you no longer need group operations.