Skill Inventory Expert
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill appears to be a benign guide for listing installed skills, with read-only local inventory commands that fit its stated purpose.
This skill is safe to treat as a local inventory helper. Before using or sharing its output, check that listing your installed skills and available runtimes does not disclose information you consider private.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may reveal a list of installed skills and local tool capabilities in its generated inventory.
The skill documents local shell commands for reading skill files, reading a local skills configuration file, and detecting installed runtimes. This is expected for an inventory guide, but it does expose local capability information to the agent's output.
find ~/skills -name "SKILL.md" ... cat ~/.claude/skills.json ... which python3 && python3 --version
Review the generated inventory before sharing it externally, especially if installed skill names or local configuration details are sensitive.