ClawPlot

ReviewAudited by ClawScan on May 10, 2026.

Overview

ClawPlot is a coherent instruction-only commerce skill for ordering physical plotted art, but users should confirm the design, price, payment method, and shipping details before any order is submitted.

Before installing or using this skill, be aware that it is meant to create real physical orders. Treat order submission like an online purchase: verify the artwork, price, recipient, address, and payment method before proceeding.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent could submit an order request and generate a payment link using the user's artwork and shipping details.

Why it was flagged

The skill documents an API call that creates a real-world art order and payment flow. This is purpose-aligned, but it is a high-impact action that should be user-confirmed.

Skill content
curl -X POST https://clawplot.com/api/order ... "payment_method": "stripe", ... "shipping": { ... }
Recommendation

Confirm the final SVG, size, paper, ink, total price, payment method, and shipping address with the user before calling the order endpoint or completing any payment.

What this means

The user's name, address, and submitted artwork may be transmitted to the ClawPlot service for order fulfillment.

Why it was flagged

The order API requires personal shipping information to be sent to the external clawplot.com service. This is expected for fulfillment, but it is sensitive data.

Skill content
| shipping | object | Shipping address ... | name | string | yes | ... | country | string | yes |
Recommendation

Only provide shipping details and artwork the user intentionally wants to share with ClawPlot.