Mal Lookup
PassAudited by ClawScan on May 1, 2026.
Overview
This is a simple MyAnimeList lookup skill with disclosed network lookups and no credentials, persistence, or code files.
This skill appears safe for ordinary MyAnimeList lookups. Be aware that it uses MyAnimeList endpoints directly, so any search text or username you ask it to look up may be sent to that service.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms, usernames, and list/chart requests may be sent to MyAnimeList when the skill is used.
The skill discloses that it makes direct network requests to MyAnimeList internal endpoints; this is aligned with the lookup purpose but is still worth noticing because user queries are sent externally.
This skill uses MAL's internal `load.json` and `prefix.json` endpoints.
Use it for non-sensitive lookups and avoid entering private or sensitive identifiers as search terms.
The displayed version information may be slightly inconsistent, but there is no evidence of hidden code or unsafe installation behavior.
The registry metadata and SKILL.md frontmatter show different versions, indicating minor packaging drift. No code or install script is present, so this is not a material concern.
Version: 1.3.1 ... SKILL.md: version: 1.3.0
If exact version provenance matters, verify the published package metadata before relying on it.