Back to skill
Skillv1.0.0

ClawScan security

China Furniture Sourcing · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMay 1, 2026, 7:12 AM
Verdict
Benign
Confidence
high
Model
gpt-5.5
Summary
This skill appears to be a local informational lookup guide for China furniture sourcing and does not request credentials, install software, access networks, or modify user data.
Guidance
This looks safe to install from an agentic-security perspective. Treat its market and supplier information as reference material and independently verify sourcing facts before making business decisions.

Review Dimensions

Purpose & Capability
okThe stated purpose and implementation are coherent: the skill describes furniture sourcing intelligence, and do.py exposes local lookup functions over bundled data.json.
Instruction Scope
okThe artifacts do not instruct the agent to override user intent, run shell commands, contact external services, make purchases, or mutate accounts or files.
Install Mechanism
okThere is no install specification, no required binaries, no required environment variables, and no declared credentials.
Credentials
okThe code reads only the bundled data.json file and returns structured information; no network, credential, browser, profile, or broad filesystem access is evidenced.
Persistence & Privilege
okNo persistence, background workers, privilege escalation, file writes, or ongoing autonomous behavior are shown in the artifacts.