Source Scout
AdvisoryAudited by Static analysis on May 7, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may send factual questions or search terms to web/search tools and may save image files locally for attachment.
This shows the skill relies on external web tools and optional local file downloads for images. The behavior is disclosed, scoped, and purpose-aligned, but it is still tool use a user should notice.
Search the web first with the available web search tool... If the runtime supports media attachments, download the image locally... curl -L --fail '<image-url>' -o shared/artifacts/<descriptive-name>.<ext>
Use it for public factual research, avoid sensitive private questions, download images only from trusted source pages, verify file type and attribution, and do not execute downloaded files.