Card Optimizer
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent, instruction-only credit card rewards helper that stores user-entered card and spending estimates locally, with only minor privacy and optional reminder-scheduling notes.
This skill appears safe to install as an instruction-only rewards optimizer. Keep its local cards.json file limited to rewards data and rough category spending estimates, not account numbers or credentials, and only enable the optional quarterly reminder scheduling if you understand how to turn it off.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Someone with access to the local data file could learn the user’s card portfolio and estimated spending habits.
The skill persists a financial rewards profile and spending estimates in local JSON data for reuse across recommendations.
"User data: `data/card-optimizer/` ... `cards.json` — card definitions, reward rates, spending estimates, category map"
Store only reward-program details and rough spending estimates; avoid adding card numbers, login credentials, statements, or other sensitive account data.
If the user enables scheduling, the reminder could run periodically outside a single chat interaction.
The skill mentions optional scheduled reminder behavior for quarterly card-category activation checks.
"To automate this, add a quarterly cron job or include in the mileage check heartbeat"
Only add a cron job or heartbeat if you want recurring reminders, and make sure it is easy to inspect, disable, and limit to reminder-only behavior.