Skylv Rate Limit Manager

AdvisoryAudited by Static analysis on May 3, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If the skill asks for API keys, those keys could allow access to external API accounts or usage information.

Why it was flagged

The skill may need API credentials for quota checks or service-specific limits, but the credential contract is not declared in metadata. This is purpose-aligned, but users need to understand what credentials are being provided.

Skill content

Required env vars: none; Primary credential: none; Capability signals: requires-sensitive-credentials

Recommendation

Use service-specific, least-privilege API keys where possible, avoid pasting broad or long-lived secrets into chat, and confirm exactly which service and quota action is being performed.