scryfall-cards
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward Magic: The Gathering card lookup skill that uses the public Scryfall API, with no evidence of hidden credentials, persistence, or unsafe local access.
This skill looks appropriate for MTG card searches. Before installing, be aware that your card queries go to Scryfall and that the registry does not list a source homepage, but the artifacts do not show suspicious behavior.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
MTG card names or search terms entered by the user may be sent to Scryfall.
The helper sends user-provided search terms to a fixed Scryfall API endpoint. This is disclosed and purpose-aligned, but it is still an outbound network action.
BASE_URL = "https://api.scryfall.com" ... "q": query
Use it for card lookups as intended, and avoid putting unrelated private information into search queries.
Users have limited publisher/source context, though the supplied artifacts themselves are simple and coherent.
The registry does not provide an external source or homepage for provenance. However, the artifacts show no remote installer, package dependency, or hidden setup step.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Install only if you trust the listed publisher and are comfortable with a simple Scryfall API helper.