Back to skill
Skillv1.0.0

ClawScan security

founder-coach · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 11, 2026, 3:52 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
An instruction-only coaching skill whose content and resource files align with its stated purpose and request no extra privileges, installs, or credentials.
Guidance
This is an instruction-only coaching skill and appears internally consistent: it provides frameworks, templates, and questions for founders and does not request credentials or install code. Before installing, consider: 1) provenance — the author/homepage is unknown, so treat any claims about proprietary methodology cautiously; 2) privacy — avoid pasting sensitive company data (financials, PII, unreleased strategy) into chat unless you trust the agent environment and retention policy; 3) use as guidance — this is advisory material, not legal/HR/financial advice; verify high-stakes decisions with appropriate experts. If you plan to integrate it with your tooling (calendar, docs, or metrics), re-evaluate permissions at that time.

Review Dimensions

Purpose & Capability
okThe name/description (founder coaching, delegation, energy management, CEO transition) matches the SKILL.md and the two reference documents. The skill requests no binaries, env vars, or config paths, which is proportionate to a content/advice skill. The unknown homepage/author is noted but does not create an internal inconsistency.
Instruction Scope
okSKILL.md contains coaching frameworks, templates, and questions for founder self-reflection. It does not instruct the agent to read arbitrary system files, access environment variables, call external endpoints, or collect/transmit user data beyond normal conversational prompts. The guidance is scoped to leadership/behavioral coaching.
Install Mechanism
okNo install specification or code files are present beyond documentation. Because this is instruction-only, nothing is downloaded or written to disk by the skill itself.
Credentials
okThe skill declares no required environment variables, credentials, or config paths. There are no requests for unrelated secrets or system access that would be disproportionate for a coaching skill.
Persistence & Privilege
okalways is false and the skill does not request elevated persistence or modify other skills. Autonomous model invocation is allowed by default (normal) and not combined with other red flags.