Atlas Bounty Triage

• Risk level: Low Risk
• Analyzed: May 10, 2026, 2:28 PM
• Findings: 1
• Version: 1.0.2

Overview

This is an instruction-only smart contract audit triage skill with no code, credentials, install steps, or hidden execution; the only notable issue is a minor version mismatch in metadata.

This skill appears safe to install as an instruction-only audit checklist/report generator. Be aware that it is a triage aid, not a substitute for manual smart contract review, and note the minor metadata version mismatch.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

Users may see inconsistent version information when verifying the package.

Why it was flagged

The registry and SKILL.md identify version 1.0.2, but _meta.json identifies version 1.0.1. This is a provenance/package metadata inconsistency, though there is no code or install script that would make it a runtime risk.

Skill content

"version": "1.0.1"

Recommendation

Confirm the intended version from the registry or publisher before relying on changelog details.