Harrypotter

PassAudited by ClawScan on May 1, 2026.

Overview

This is a narrow Harry Potter lookup skill with no authentication or persistence; the only caution is that its README references executable scripts/GitHub installation that are not included in the reviewed package.

This skill appears safe and narrowly scoped for public Harry Potter information lookup. Before installing, verify any external GitHub repository or script you use, since the reviewed package itself does not include the executable CLI files.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user follows the README installation steps, they may run code from a repository outside the reviewed package.

Why it was flagged

The submitted artifact set contains only README.md and SKILL.md, while the README describes installing executable scripts from a GitHub repository. Users should be aware that this external code is not present in the reviewed artifact package.

Skill content

git clone https://github.com/jeffaf/harrypotter-skill.git
cd harrypotter-skill
chmod +x harrypotter scripts/harrypotter

Recommendation

Install only from a trusted repository and inspect the referenced scripts before making them executable.