Back to skill
Skillv1.0.0
ClawScan security
IdeaSpark Navigator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 11, 2026, 9:40 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- An instruction-only ideation/facilitation skill with no code, no installs, and no credential or system access required — its requirements and instructions are coherent with the stated purpose.
- Guidance
- This skill is a knowledge-only facilitator: it contains no executable code, asks for no credentials, and its instructions stay within the stated purpose. Before installing, you may want to: (1) confirm you trust the author/source since 'Source' is unknown, (2) inspect SKILL.md/README to ensure no hidden instructions meet your privacy rules, and (3) if you prefer manual control, disable autonomous invocation for this skill in your agent settings so it won't run without your explicit prompt. Avoid pasting sensitive secrets into prompts when using any skill.
Review Dimensions
- Purpose & Capability
- okThe name/description (ideation facilitator) matches the content: a large SKILL.md/README with technique recommendations and facilitation guidance. It does not request unrelated binaries, cloud credentials, or system access.
- Instruction Scope
- okSKILL.md contains facilitation instructions, method libraries, and examples only. There are no instructions to read system files, environment variables, network endpoints, or to exfiltrate data. The manual install guidance simply tells users how to copy the SKILL.md into the skills folder.
- Install Mechanism
- okNo install spec or code files; it's instruction-only. README suggests a manual copy into ~/.openclaw/skills or using the platform CLI, which is typical for knowledge-only skills and does not pull external code or binaries.
- Credentials
- okRequires no env vars, API keys, or config paths. No credentials are requested and the documentation explicitly says no API keys are required.
- Persistence & Privilege
- okalways:false and no special privileges requested. Installing the SKILL.md into the skills directory grants normal skill presence only; there is no evidence it modifies other skills or system-wide settings.