web3-grant-tracker
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned for Web3 grant tracking, but users should verify the referenced CLI source and understand what alert/tracking data may be stored or sent externally.
This looks acceptable as an instruction-only Web3 grant tracking skill, but do not run any `web3-grant-tracker` command until you have verified the executable source. If you enable WhatsApp/Telegram alerts or application tracking, check what project data is stored or sent and how to disable or delete it.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a user runs a `web3-grant-tracker` executable from their PATH or another source, that executable is outside the reviewed artifacts.
The skill instructs users to run a named CLI, while the provided install information says there is no install spec, no code files, and no required binary. This makes the command’s provenance something the user should verify before running it.
web3-grant-tracker scan
Install or run the CLI only from a source you trust, and verify that the executable matches the intended project before using the command examples.
Project names, application status, or deadline information may be shared with external messaging services if alert setup is used.
The skill advertises sending deadline alerts through external messaging channels, but the artifacts do not describe what data is sent, how accounts are authenticated, or how recipients are controlled.
Deadline alerts — WhatsApp/Telegram warning 48h and 24h before round ends
Before enabling alerts, confirm which messaging account is used, what information is included in alerts, and how to disable them.
Tracked project/application data may persist beyond a single interaction if the referenced tool implements this feature.
Tracking applications implies retaining project and application-status information for later reuse, but the artifacts do not specify storage location, retention, or deletion controls.
Application tracker — tracks which rounds you've applied to and their status
Use only non-sensitive project information unless you know where the tracker stores data and how to remove it.