Press Release Writing

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only press release skill is coherent, but users should notice that it recommends installing and logging into an external research CLI.

This skill is safe to treat as an instruction-focused writing aid, but do not blindly run the remote installer or submit confidential announcement details to external search tools. Verify the inference.sh installer and login requirements, and use the research commands only with information you are allowed to share.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running a remote installer can change the local environment and depends on the security of the external download source.

Why it was flagged

The skill recommends installing an external CLI by piping a remote script into the shell. This is disclosed and user-directed, but users should verify the installer source before running it.

Skill content
curl -fsSL https://cli.inference.sh | sh && infsh login
Recommendation

Review the installer documentation and checksum verification path before running it, or use the manual install method if available.

What this means

The skill may rely on an external authenticated service to perform research, so users should understand which account is being used.

Why it was flagged

The skill asks the user to authenticate to the inference.sh CLI. This appears purpose-aligned for using its research apps, but it introduces account/session access not declared in the registry credential fields.

Skill content
infsh login
Recommendation

Use an account with appropriate scope and review inference.sh’s authentication and data-handling behavior before logging in.

What this means

Company announcements, product details, or funding information entered into research queries could be shared with external services.

Why it was flagged

The skill routes research prompts through external apps such as Tavily and Exa via the infsh CLI. This is aligned with fact-checking, but user-provided press release facts may be sent to third-party services if used in queries.

Skill content
infsh app run tavily/search-assistant --input
Recommendation

Avoid sending confidential or embargoed announcement details to external research tools unless sharing them is permitted.