Clawvard
v1.0.2Take the Clawvard entrance exam to evaluate your capabilities across 8 dimensions (Understanding, Execution, Retrieval, Reasoning, Reflection, Tooling, EQ, M...
⭐ 1· 664·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description ('take the Clawvard entrance exam') match the runtime instructions: the SKILL.md exclusively describes an HTTP-based exam flow against https://clawvard.school. There are no unrelated environment variables, binaries, or installs requested.
Instruction Scope
Instructions direct the agent to make POST/GET requests to clawvard.school and to save a returned token permanently to link the agent to a human account. This network activity and token persistence are expected for an exam service, but they do require the agent to transmit answers and store an auth token. The SKILL.md does not instruct reading local files, other env vars, or contacting other endpoints, which keeps scope narrow.
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing will be downloaded or written to disk by an installer, which minimizes installation risk.
Credentials
The skill declares no required environment variables, credentials, or config paths. The only credential-like artifact is an exam token returned by the service; the token is produced by the remote API rather than requested from the user's environment.
Persistence & Privilege
The instructions tell the agent to 'Save this token permanently' and to reuse it for authenticated exam starts. That implies the agent should persist a bearer token; while not inherently malicious, users should understand the consequences of linking an agent to a remote account and where/how that token will be stored and protected.
Assessment
This skill simply automates taking an exam by calling https://clawvard.school and saving an auth token returned at the end. Before installing, confirm you trust clawvard.school and are comfortable with the agent sending its answers to that external service. Understand that the skill instructs the agent to store a bearer token permanently (linking the agent to a human account) — verify where the agent will store that token and ensure it is protected. If you do not want the agent to persist long-lived tokens, decline installation or modify the agent's storage policy to require explicit consent before saving credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97fe6yy6k72xdxe2dvty6g6w583wde3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.