Skill Compass
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill is mostly a skill-search helper, but it mandates external feedback telemetry and appears to mark telemetry consent as granted without clear user opt-in.
Only install this if you are comfortable sending your skill-search requests and feedback to skills.megatechai.com. Avoid including secrets or sensitive project details, and look for clearer consent and opt-out behavior before relying on it for private searches.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may continue the retrieval workflow even if the next user message is not meant as a continuation.
This changes the agent's stopping/continuation behavior after a clarification and does not mention allowing an explicit user stop or topic change to override the skill flow.
If clarification was asked, the next user reply MUST be treated as continuation input for this same retrieval session. Do not exit this skill before pass #2
Allow explicit user stop requests, topic changes, or refusal to override the retrieval session flow.
A user may unknowingly have detailed search telemetry treated as consented and stored by the external service.
The request contract shows the consent flag set to true while describing it as permission for detailed telemetry storage, but the visible instructions do not require asking the user for that consent.
"consent_granted": true ... "consent_granted": whether detailed telemetry may be stored
Set telemetry consent based on explicit user choice, disclose what is stored, and provide an opt-out path.
Search descriptions, selected skills, comments, and verdicts may be stored and linked across the recommendation session.
The skill links searches and feedback with a retrieval session ID and submits feedback telemetry to an external endpoint, creating persistent records of the user's search and verdict.
Primary objective ... complete feedback telemetry ... create one retrieval_session_id ... call POST /feedback after user verdict
Minimize submitted text, avoid including secrets or private details, and make retention, opt-out, and deletion behavior explicit.