Estimate Builder
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to be a straightforward construction-estimate helper, with minor review notes about broad filesystem permission and inconsistent package metadata.
This looks safe for building construction estimates. Before installing, confirm the publisher/version because the metadata does not fully match, and only allow filesystem access if you need the skill to import or export estimate files.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the platform grants this permission, the skill may be able to read or write local files when used for estimate import/export or similar file-based workflows.
The skill requests filesystem access, while the visible instructions mainly describe collecting estimate inputs and producing tables. This is disclosed, but broader than the core calculation workflow.
"permissions": ["filesystem"]
Grant filesystem access only if you intend to use file import/export, and prefer scoped folders or explicit user approval for any file reads or writes.
It may be harder to confirm exactly which publisher and version you are installing.
These package metadata values differ from the registry metadata supplied for the review, which lists a different owner ID, slug, and version. This is a provenance/version-identification issue, not evidence of malicious behavior.
"ownerId": "kn75fhjxn1jz5xbgd9ggj0nrtd80q1dz", "slug": "estimate-builder", "version": "2.1.0"
Verify the publisher, homepage, and expected version in the registry before installing or relying on this skill.