GitHub Cred

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only GitHub profile scoring rubric with no reviewed code, credentials, local access, mutation authority, or persistence.

This skill appears safe to use as a scoring guide for GitHub profiles. If you choose the README's manual clone installation path, verify the referenced repository first because it is outside the reviewed instruction-only artifact set.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the user installs from the manual GitHub clone rather than the reviewed instruction-only package, they may receive different or additional files not assessed here.

Why it was flagged

The reviewed artifact set contains no code and no install spec, while the README documents an optional manual clone from an external repository. This is common for manual installation, but that external repository is not part of the reviewed package.

Skill content

git clone https://github.com/zerone0x/clawdbot-skill-github-cred.git ~/.clawdbot/skills/github-cred

Recommendation

Prefer installing the reviewed package, or inspect the referenced repository before manually cloning it.