Back to skill
v1.0.0

Resiliant Connections

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:32 AM.

Analysis

This is an instruction-only skill with coherent resilience design examples and no code execution, credentials, or data access, with only a minor provenance note around optional install commands.

GuidanceThis skill appears safe as instructional material for resilient API/client design. Before running optional installation commands, verify that the package or GitHub source is the one you intend to trust.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities
SeverityLowConfidenceHighStatusNote
README.md
npx add https://github.com/wpank/ai/tree/main/skills/realtime/resilient-connections

The README documents a user-directed install command that pulls from a mutable GitHub branch rather than a pinned release. This is not automatic behavior and no code files are included, but users should verify the source before running it.

User impactIf a user manually runs the remote install command, they are trusting the current contents of that GitHub path.
RecommendationPrefer the registry install path or verify and pin the remote source before using manual GitHub-based installation commands.