just-fucking-cancel

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub repo itself looks like a normal source-code location (lower risk), but the other two domains are unfamiliar/ inconsistent ("clawdhub.com" vs "clawhub.ai") and appear to be personal/third‑party hosting which can be used to distribute binaries or be typosquatting — so treat these as suspicious/untrusted until verified.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references using the Plaid Transactions API to pull 6–12 months of transactions (a direct banking API integration). Plaid is a specific banking API named in the core rules, which makes this skill specifically designed to access user financial account data and thus meets the criterion for Direct Financial Execution risk. (Browser automation mentioned for cancellations is a generic capability and would be ignored on its own, but the Plaid integration triggers the flag.)