Performance Tester

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent roadmap-generation API with no code, install steps, credentials, or local access, but it may send career assessment details and identifiers to a service with limited provenance metadata.

This appears safe for normal use as a learning-roadmap generator. Before installing, confirm you are comfortable sharing career assessment details with this service, and avoid including confidential project, employer, or personal information that is not needed for the roadmap.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your career goals, skills, experience, session ID, and optional user ID may be included in a roadmap request.

Why it was flagged

The API schema shows that roadmap generation may submit assessment details along with session and optional user identifiers. This is purpose-aligned for personalization, but users should recognize that these details may be shared with the service.

Skill content
"/api/performance/roadmap" ... "RoadmapRequest" ... "assessmentData" ... "sessionId" ... "userId"
Recommendation

Only provide the assessment details needed for the roadmap, and avoid adding sensitive personal or employer-confidential information.

What this means

There is less public information available to independently verify the publisher or service before sharing assessment data.

Why it was flagged

The registry metadata provides limited provenance for the skill or backing service. There is no install code or dependency risk shown, so this is a transparency notice rather than a security concern.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify that you trust the publisher or deployment context before submitting identifiable or sensitive information.