Service Layer Architecture

• Risk level: Low
• Analyzed: May 1, 2026, 5:31 AM
• Findings: 1
• Version: 1.0.0

Overview

This is an instruction-only API architecture guide; the only noteworthy item is a user-directed remote installation example in the README.

This skill appears safe as an instruction-only architecture guide. Before using the README installation command, make sure you trust the referenced GitHub source or install through a trusted registry path.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Low

What this means

If a user follows the README install command, they rely on the referenced remote GitHub content at install time.

Why it was flagged

The README suggests a user-run remote installation command from a GitHub branch rather than a pinned version. This is normal for installation documentation, but it is still something users should verify before executing.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/backend/service-layer-architecture

Recommendation

Install from a trusted source, review the referenced repository if possible, and prefer pinned versions or registry-managed installation when available.