Trade Qualifier

AdvisoryAudited by Static analysis on May 10, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

This does not show malicious behavior, but users may want to know why a network-capable command-line tool is required for an otherwise instruction-only scoring skill.

Why it was flagged

The skill declares curl as a required binary even though the provided files contain no code, install step, URL, or documented reason for using network-capable tooling.

Skill content
requires:
      bins:
        - curl
Recommendation

The publisher should either remove the curl requirement if unused or document exactly when and how it is used, including any network destinations and user approval expectations.