v1.0.0

GilBot Wealth Engine

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 2:45 AM.

Analysis

This skill does not request code, tools, or credentials, but its only runtime file is an opaque PDF blob instead of readable skill instructions.

GuidanceDo not rely on this skill for financial decisions until the publisher replaces the PDF-like SKILL.md with readable instructions. If you still install it, avoid sharing sensitive financial details or acting on investment recommendations without independent review.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityMediumConfidenceHighStatusConcern

SKILL.md

%PDF-1.4 ... /Title (SKILL.md) ... /Producer (Skia/PDF m149 Google Docs Renderer) ... <</Filter /FlateDecode /Length 3608>> stream

The sole runtime instruction artifact is packaged as a PDF with compressed binary streams rather than readable Markdown. For an instruction-only skill, this creates an artifact/provenance and instruction-transparency gap: the user cannot verify the actual instructions, scope, or safety limits from the supplied SKILL.md text.

User impactThe skill may be broken or may contain instructions that are not easily reviewable before installation, which is especially important for a financial-advice skill.

RecommendationAsk the publisher to provide a plain-text SKILL.md with clear financial-analysis scope, limitations, and safety guidance before installing or relying on it.