Attribution Engine
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only attribution helper aligns with its stated purpose and requests no code execution, credentials, or account access; only minor provenance metadata inconsistency is worth noticing.
This appears safe to use as an attribution-formatting assistant. Still verify generated credits and disclosures against the latest platform rules and do not treat its output as legal advice.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You have limited external provenance for the package and its version labels are not perfectly aligned, but the supplied artifacts do not show executable or permission-seeking behavior.
The registry provenance is limited, and the registry version does not align with the SKILL.md version 1.2 or _meta.json version 1.2.0. Because this is instruction-only with no code or install step, this is a low-impact supply-chain note rather than a security concern.
Source: unknown; Homepage: none; Version: 1.2.1
Install only if you trust the registry and owner; the publisher should align version metadata and add a source or homepage link.