Back to skill
Skillv2.0.0
ClawScan security
Game · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 5:29 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only game design engine and its declared requirements and instructions are coherent and proportionate to that purpose.
- Guidance
- This skill is instruction-only and appears internally consistent for generating game designs. It's low-risk as provided because it requests no installs, files, or credentials. Before installing, review the full SKILL.md for any later sections that might ask the agent to fetch external assets or require API keys; if a future version adds code, downloads, or environment variables, re-evaluate for disproportionate access or network calls. Also avoid pasting any sensitive personal or credential information into prompts when using the skill.
Review Dimensions
- Purpose & Capability
- okName and description match the SKILL.md content: it generates playable game designs on text input. It requests no binaries, env vars, or installs that would be unnecessary for that function.
- Instruction Scope
- okThe SKILL.md contains design guidance and example outputs only; it does not instruct the agent to read files, access credentials, call external endpoints, or exfiltrate data. Truncated content continues the same design-focused guidance.
- Install Mechanism
- okNo install spec or code files are present. Being instruction-only means nothing will be written to disk or downloaded during install.
- Credentials
- okNo environment variables, credentials, or config paths are requested. There is no need for additional secrets to accomplish the stated purpose.
- Persistence & Privilege
- okalways is false and the skill is user-invocable. The skill does not request elevated or persistent platform privileges; autonomous invocation is allowed but is the platform default and not itself problematic here.
