/add-wish — Universal Add to Wishlist

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill coherently creates Wishfinity wishlist links, but users should know it routes product URLs and shopping intent to Wishfinity and may proactively offer wishlist saves.

Safe to consider if you want Wishfinity wishlist integration. Before installing, understand that clicking generated links sends product URLs to Wishfinity, may require a Wishfinity account, and stores saved items in a wishlist that may be shareable depending on account settings.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

A user asking to add something to a retailer cart could be steered toward a Wishfinity wishlist link instead.

Why it was flagged

The trigger guidance includes cart-like user requests and suggests saving instead of purchasing, which could shift the user's goal if not presented clearly as an optional alternative.

Skill content
"Add to cart" / "Add to my cart" (save instead of immediate purchase)
Recommendation

Only offer this as a save-for-later option and ask for confirmation before treating cart or checkout requests as wishlist saves.

What this means

Wishfinity can learn which product URL the user wanted to save, which may reveal shopping interests.

Why it was flagged

The skill's core workflow sends or exposes the product URL to the Wishfinity service when the user opens the generated link.

Skill content
https://wishfinity.com/add?url={product_url}
Recommendation

Make clear to users that clicking the link sends the product URL to Wishfinity, and avoid including private or tokenized URLs.

What this means

Saved products may persist in the user's Wishfinity account and become part of a shareable wishlist or purchase-intent record.

Why it was flagged

The provider stores enriched product information persistently as part of the wishlist service.

Skill content
Wishfinity automatically extracts and stores the product's title, description, images, and latest price
Recommendation

Users should review Wishfinity account, privacy, and sharing settings before saving sensitive or personal items.

What this means

A user may expect a frictionless save but need to create or use a Wishfinity account.

Why it was flagged

The marketing phrase 'zero setup' is qualified later by a user account requirement, which users should notice before relying on the save flow.

Skill content
zero setup ... Free Wishfinity account required — users sign up at wishfinity.com
Recommendation

Present the account requirement alongside the generated link so the user understands what will happen when they click.