Cochesnet Cli

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a narrow instruction-only guide for using a coches.net CLI, with no code or credentials, but users should ensure the external CLI they install is trusted.

This looks benign for searching coches.net listings. Before installing or using it, make sure the cochesnet-cli binary you have installed is legitimate and that its configured base URL points to the expected coches.net service.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user has installed a different or untrusted binary named cochesnet, the agent could invoke that local program.

Why it was flagged

The skill relies on an external CLI that is not included or installed by the skill artifacts, so the safety depends on the user's separately installed cochesnet-cli.

Skill content
compatibility: Requires cochesnet-cli installed (Node.js 18+), network access to apps.gw.coches.net.
Recommendation

Install cochesnet-cli only from a trusted source and confirm the expected binary is on PATH before using this skill.

What this means

The agent may run the cochesnet CLI to send marketplace search queries or listing IDs to the configured coches.net endpoint.

Why it was flagged

The skill documents local CLI command invocation with user-supplied search terms and network-backed marketplace lookups. This is purpose-aligned and scoped, but still worth noticing before use.

Skill content
cochesnet search "<query>" [--limit <n>] [--page <n>]
Recommendation

Use this skill only for intended coches.net searches, and review commands if queries or listing IDs are sensitive.