api-versioning

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a benign documentation-only API versioning guide, with a minor supply-chain caution if you use its unpinned GitHub/npx install example.

This skill is primarily API design documentation and appears safe to use as guidance. If installing manually, verify the GitHub source first and avoid running npx commands from untrusted or unpinned locations.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If you run the install command, you are trusting whatever is currently at that GitHub path.

Why it was flagged

The installation example is user-directed, but it references a moving GitHub branch through npx rather than a pinned release or registry source.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/api/api-versioning

Recommendation

Install only from a trusted source, prefer pinned versions or reviewed registry artifacts, and inspect the repository before running npx commands.