Release Preflight

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent local pre-release checker that reads the chosen target folder and can optionally write a report, with no evidence of credential use, network transfer, hidden persistence, or destructive behavior.

This skill appears safe for its stated purpose. Before installing or using it, remember that it scans files under the target path you provide, so use it on the intended release folder rather than a whole home directory, and review the report before publishing it.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If pointed at a broad private directory, the tool may inspect more local files than intended and the generated report may include absolute local paths or identity-leakage indicators.

Why it was flagged

The script recursively enumerates the selected target directory, reads text-like files for local identity markers, and can write a report to a user-provided output path. This is aligned with the pre-release checking purpose, but it is still local filesystem access.

Skill content
return sorted(p for p in root.rglob('*') if p != root) ... return path.read_text(errors='ignore') ... if args.output: ... out.write_text(report)
Recommendation

Run it only on the specific folder or bundle you intend to release, and review any generated report before sharing or publishing it.