Birth Chart

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only birth-chart skill is coherent and low-risk, but it asks users to share personal birth details with an external astrology API.

Before installing, confirm you are comfortable sending name, birth date, birth time, and birth location to the referenced astrology API. There is no local code, installation step, credential use, or persistence shown in the artifacts.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may share a person's name, birth date, birth time, and birth location with the API provider.

Why it was flagged

The skill requires personal birth details and references an external API route, so user-provided personal data is part of the remote service flow.

Skill content
`| name | string | Yes | Full name of the individual |` ... `| birth_location | string | Yes | Birth location` ... `Kong Route: https://api.mkkpro.com/lifestyle/birth-chart`
Recommendation

Use only if you are comfortable sharing those details with the provider, and check the provider's privacy and retention practices if available.

What this means

Users have less registry-level information for verifying who operates or maintains the service.

Why it was flagged

The registry does not provide a source repository or homepage, which limits provenance checking for a remote API-backed skill.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the provider links and API documentation before relying on the service, especially for personal data.