Back to skill
Skillv1.0.0
ClawScan security
founder-coach · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 11, 2026, 3:52 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- An instruction-only coaching skill whose content and resource files align with its stated purpose and request no extra privileges, installs, or credentials.
- Guidance
- This is an instruction-only coaching skill and appears internally consistent: it provides frameworks, templates, and questions for founders and does not request credentials or install code. Before installing, consider: 1) provenance — the author/homepage is unknown, so treat any claims about proprietary methodology cautiously; 2) privacy — avoid pasting sensitive company data (financials, PII, unreleased strategy) into chat unless you trust the agent environment and retention policy; 3) use as guidance — this is advisory material, not legal/HR/financial advice; verify high-stakes decisions with appropriate experts. If you plan to integrate it with your tooling (calendar, docs, or metrics), re-evaluate permissions at that time.
Review Dimensions
- Purpose & Capability
- okThe name/description (founder coaching, delegation, energy management, CEO transition) matches the SKILL.md and the two reference documents. The skill requests no binaries, env vars, or config paths, which is proportionate to a content/advice skill. The unknown homepage/author is noted but does not create an internal inconsistency.
- Instruction Scope
- okSKILL.md contains coaching frameworks, templates, and questions for founder self-reflection. It does not instruct the agent to read arbitrary system files, access environment variables, call external endpoints, or collect/transmit user data beyond normal conversational prompts. The guidance is scoped to leadership/behavioral coaching.
- Install Mechanism
- okNo install specification or code files are present beyond documentation. Because this is instruction-only, nothing is downloaded or written to disk by the skill itself.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. There are no requests for unrelated secrets or system access that would be disproportionate for a coaching skill.
- Persistence & Privilege
- okalways is false and the skill does not request elevated persistence or modify other skills. Autonomous model invocation is allowed by default (normal) and not combined with other red flags.
