v1.0.0

NOC Engineer

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:05 AM.

Analysis

This skill appears to be a coherent career-roadmap API that collects user-provided skills and goals data for its stated purpose, with only minor privacy/provenance notes.

GuidanceThis skill looks safe to install for its stated purpose. Before using it, avoid entering sensitive personal or employment information beyond what is needed for a NOC career roadmap, and verify the provider if you plan to associate the data with a real user profile.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown; Homepage: none

The artifacts do not identify an upstream source or homepage for the service. There is no installable code or dependency risk shown, so this is a provenance note rather than a security concern.

User impactIt may be harder to independently verify who operates or maintains the roadmap API before sharing assessment data.

RecommendationPrefer using the skill only with non-sensitive assessment details unless you can verify the publisher or service endpoint through trusted channels.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

openapi.json

"assessmentData": { "$ref": "#/components/schemas/AssessmentData" }, "sessionId": { "type": "string" }, "userId": { "anyOf": [ { "type": "integer" }, { "type": "null" } ] }

The API request schema sends assessment data along with session and optional user identifiers. This is expected for a personalized roadmap service, but it is still user/profile data flowing to an API.

User impactYour skills, career goals, session ID, and optional user ID may be sent to the roadmap service to generate personalized recommendations.

RecommendationSubmit only career information needed for the roadmap, avoid sensitive unrelated details, and verify the service/provider if using real profile identifiers.