Architecture Decision Records
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
If a user installs using this command, they may receive whatever content is currently on that GitHub branch rather than a fixed reviewed version.
Why it was flagged
The README suggests a user-run install command from a GitHub main-branch path rather than a pinned release or commit, so the fetched content could change over time.
Skill content
npx add https://github.com/wpank/ai/tree/main/skills/backend/architecture-decision-records
Recommendation
Prefer installing from the registry or a pinned commit/release, and verify the repository contents before running the npx command.