kmong
WarnAudited by ClawScan on May 10, 2026.
Overview
This skill is a Review item because it tells an agent to create and verify a Kmong seller account using your Google account, identity details, SMS code, captcha, and terms acceptance.
Install or invoke this only if you are comfortable supervising a high-impact account-registration workflow. Manually review terms, complete captcha/SMS and identity fields yourself, use a clearly chosen account, and verify the source before allowing the agent to register or modify a public Kmong seller profile.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked, the agent could complete identity verification and account onboarding steps that are normally meant to be directly controlled by the user.
The skill instructs browser automation to manipulate verification UI with injected page evaluation, read captcha/security characters from a screenshot, and complete SMS identity verification. These are high-impact account-verification actions without clear approval boundaries.
Select carrier radio: click via evaluate ... document.querySelectorAll('input[type=radio]')[0].click(); ... Enter name, birthdate(6 digits), 7th digit of SSN, phone number, security characters; Read security characters via screenshot; ... Enter SMS verification codeRequire explicit user confirmation before each identity, SMS, captcha, and account-registration step; consider completing captcha and SMS verification manually.
The agent may act with your Google/Kmong account authority and submit personal identity information to the PASS/Kmong verification flow.
The workflow depends on a Google account and sensitive real-world identity verification details. The artifact does not clearly bound which account or identity data may be used, how the user approves it, or how mistakes are reversed.
Select Google account → Click "Continue" ... Enter name, birthdate(6 digits), 7th digit of SSN, phone number
Use only a user-selected account, keep personal identity entry under direct user control, and do not let the agent proceed without explicit confirmation of each field and destination.
The user could be bound to platform or seller terms without personally reviewing them at the moment of acceptance.
The skill directs the agent to bulk-accept sign-up and seller terms as part of automation, but it does not require the user to review or explicitly approve those legal/consent choices.
Check agree all → "Sign up complete" ... In main tab, agree to seller terms → "Expert registration complete"
Pause before any "agree all" or seller-terms action and require the user to review and approve the exact terms manually.
You have limited external context for who authored these high-impact instructions or whether they match Kmong's intended workflows.
There is no executable package to inspect, but the skill's provenance is limited while it gives instructions for high-impact account and identity-verification actions.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Verify the author/source and prefer following official Kmong account-registration guidance for identity and seller setup.