Monobank
ReviewAudited by ClawScan on May 5, 2026.
Overview
This instruction-only skill is coherent and purpose-aligned, but it requires a Monobank API token to retrieve sensitive bank balance information.
This skill appears safe to review as an instruction-only Monobank balance helper. Before using it, understand that you will be sharing a Monobank API token with your agent for that request, and the response will contain financial balance information. Use it only in a trusted session and do not let the token be stored or reused.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using this skill will need to provide a Monobank API token that can access bank account balance information.
The skill requires a user-provided banking API token, which is sensitive account authority. The instructions limit it to per-request use and prohibit storage, so this is a purpose-aligned notice rather than a concern.
The user must provide `monobank_token` for each request. Never store it in files, env vars, memory, directives, logs, summaries, or future context.
Only provide the token when you intend to check your Monobank balance, and verify the agent does not print, save, or reuse the token.