cro_skill
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a simple local risk-assessment helper with no evidence of credential use, network access, persistence, or destructive behavior.
This skill looks safe to review as a lightweight local decision-support tool. Because it produces business risk advice, treat its outputs as preliminary and verify important decisions with qualified risk, legal, or compliance professionals.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You have less external context for who maintains the skill or where updates come from.
The package does not provide a source repository or homepage, which limits provenance verification even though the included code is simple and the static scan is clean.
Source: unknown; Homepage: none
Review the included source before installing and prefer packages with clear source and maintainer information for production use.