Back to skill
Skillv1.0.0
ClawScan security
Photo · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 8, 2026, 7:10 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This skill is a purely descriptive, instruction-only specification for an imaging protocol and does not request credentials, install code, or perform any actions — it appears to be what it says it is.
- Guidance
- This skill is a conceptual specification only — it contains no executable code, does not request credentials, and does not perform actions. If you expected an implementation (libraries, tooling, or concrete procedures for embedding cryptographic provenance), ask the publisher for: (1) a concrete specification or reference implementation (source code, API endpoints, or libraries), (2) documentation of any external dependencies and security/privacy properties, and (3) a verifiable provenance test-suite or sample artifacts. Also prefer published standards or repository links and verify the author's identity before trusting any real-world cryptographic or forensic claims.
Review Dimensions
- Purpose & Capability
- okName and description describe a protocol/specification; the skill is instruction-only and requires no binaries, env vars, or installs, which is proportionate for a conceptual spec.
- Instruction Scope
- okSKILL.md contains only high-level protocol text and conceptual fields. It does not instruct the agent to run commands, read files, access environment variables, or transmit data — no scope creep detected.
- Install Mechanism
- okThere is no install spec and no code files, so nothing is written to disk or fetched at install time — this is the lowest-risk install profile.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths; there is no disproportionate request for secrets or unrelated access.
- Persistence & Privilege
- okalways is false and model invocation is allowed (platform default). The skill does not request permanent presence or attempt to modify other skills or system-wide settings.