Skillv0.1.0

ClawScan security

Game Idea Generator Skill · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 28, 2026, 5:22 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only skill that provides templates and checklists for generating game ideas; its declared files, instructions, and requirements are coherent and proportionate to that purpose.
Guidance: This skill is instruction-only and appears coherent for brainstorming game ideas. Before using: avoid pasting any private keys, passwords, or sensitive PII into prompts (the skill itself also warns not to collect secrets). Note the PayPal donate link is an external URL — only follow or provide payment information if you trust the author. Because the skill can be invoked by the agent, review any outputs before acting on them, and never paste confidential data into the skill prompts. If you want higher assurance, request the author/source or a more detailed changelog (the metadata mentions "Pending Telegram approval"), but there are no technical red flags in the package itself.

Purpose & Capability: okThe name/description (Game Idea Generator) matches the SKILL.md content: templates, checklists, and guidance for game-development brainstorming. There are no unexpected credentials, binaries, or config paths requested that would be unrelated to generating game ideas.
Instruction Scope: okSKILL.md is narrowly scoped: it asks for a non-secret goal/constraints and returns a plan, checklist, next actions, and optional copy blocks. It explicitly forbids collection of secrets and remote installers, and does not instruct the agent to read system files, environment variables, or external endpoints (aside from an optional donation link).
Install Mechanism: okNo install spec and no code files (instruction-only). Nothing is written to disk or downloaded during install; therefore install risk is minimal.
Credentials: okThe skill requires no environment variables, credentials, or config paths. The absence of requested secrets is proportionate to its stated purpose.
Persistence & Privilege: okalways is false and model invocation is allowed (the platform default). The skill does not request persistent or elevated privileges and does not modify other skills or system-wide settings.