mtg-edh-deckbuilder

• Risk level: Low
• Analyzed: May 1, 2026, 5:19 AM
• Findings: 1
• Version: 1.0.3

Overview

This skill appears to be a straightforward Magic: The Gathering card lookup helper that sends card-search queries to Scryfall.

This appears safe for ordinary MTG card and deck-building questions. Be aware that your card-search terms are sent to Scryfall, but the artifacts do not show credential use, local data access, persistence, or destructive behavior.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Info

What this means

Card names and search queries entered through this skill may be sent to Scryfall.

Why it was flagged

The skill discloses that it queries the external Scryfall API, which is necessary for retrieving MTG card data.

Skill content

Base URL: `https://api.scryfall.com`

Recommendation

Use it for MTG card lookups and avoid putting unrelated private information into card-search queries.