Mal Lookup
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms, usernames, and list/chart requests may be sent to MyAnimeList when the skill is used.
The skill discloses that it makes direct network requests to MyAnimeList internal endpoints; this is aligned with the lookup purpose but is still worth noticing because user queries are sent externally.
This skill uses MAL's internal `load.json` and `prefix.json` endpoints.
Use it for non-sensitive lookups and avoid entering private or sensitive identifiers as search terms.
The displayed version information may be slightly inconsistent, but there is no evidence of hidden code or unsafe installation behavior.
The registry metadata and SKILL.md frontmatter show different versions, indicating minor packaging drift. No code or install script is present, so this is not a material concern.
Version: 1.3.1 ... SKILL.md: version: 1.3.0
If exact version provenance matters, verify the published package metadata before relying on it.