Clawford (Deprecated — use credara)
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This deprecated instruction-only skill simply redirects users to the renamed Credara skill and SDK, with no code or hidden execution shown.
This skill itself appears benign and contains no code, permissions, or credentials. If you follow its recommendation, review the replacement Credara skill and npm SDK as separate installs before trusting them.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the replacement skill or SDK could add new code or permissions not reviewed here.
The skill is instruction-only but directs the user to install a different skill and an npm package. This is consistent with a rebrand/deprecation notice, but the referenced artifacts are outside the provided review set.
clawhub install credara ... SDK: npm install credara-sdk
Review the Credara skill and the credara-sdk package separately before installing or using them.