Skillv1.0.0

ClawScan security

Freelance Empire · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 24, 2026, 3:32 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only skill that provides templates, frameworks, and playbooks for running a freelance business; its requests and content are consistent with that purpose and it does not ask for credentials or install code.
Guidance: This skill is instruction-only and internally consistent with its freelance-business purpose: it provides templates, pricing calculators, scripts, and playbooks and does not request credentials or install code. Consider that the author/source is listed as unknown and there are promotional links to paid 'context packs' — treat external links and paid offers as separate decisions. Also remember the guidance is general business advice (not legal, tax, or regulated financial advice); verify contracts, taxes, and legal clauses with a qualified professional before acting on them.

Purpose & Capability: okName/description (freelance business OS) matches the skill contents: positioning templates, pricing playbooks, proposals, client-management guidance and scripts. There are no unexpected binaries, env vars, or config paths required.
Instruction Scope: noteSKILL.md is a large set of templates, rubrics, and scripts for the agent to use when answering freelance-related prompts. It does not instruct the agent to read local files, access environment variables, or contact external endpoints programmatically, but it does include promotional links (paid 'context packs') which are external URLs the user might visit.
Install Mechanism: okNo install spec and no code files — instruction-only skill. Nothing will be written to disk or downloaded as part of an install provided by the skill package itself.
Credentials: okThe skill declares no required environment variables, no credentials, and no config paths. There are no secret or credential requests that would be disproportionate to its stated functionality.
Persistence & Privilege: okalways:false and default model-invocation settings — normal for skills. The skill does not request persistent or cross-skill privileges or modify other skills' configurations.