Back to skill
Skillv0.1.0
ClawScan security
Deepseek V3 Lite Agent · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 15, 2026, 11:15 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only content-creation helper that requests no credentials or installs and is internally consistent with its stated purpose.
- Guidance
- This skill is low-risk and consistent with a content-creation template helper. It is instruction-only, asks for nothing sensitive, and has no install steps. Before installing, consider: (1) the skill's source is unknown — prefer skills from known publishers if you need supply-chain assurances; (2) template variables (e.g., $DATE$, $SESSION_GROUP_ID$) will be substituted at runtime — verify that substitution data is safe and not leaking sensitive context; and (3) because it's an agent skill, it can be invoked by your agent (the platform's default behavior) — if you run agents autonomously, monitor outputs during initial use or run in a sandboxed environment first.
Review Dimensions
- Purpose & Capability
- okName and description say 'content creation with template support' and the skill requires no binaries, env vars, or installs — that is proportionate for a pure instruction-based content authoring helper.
- Instruction Scope
- noteSKILL.md only instructs the agent to act as a content creator and mentions template variables like $DATE$ and $SESSION_GROUP_ID$ for runtime substitution. The instructions are very short and somewhat vague/repetitive, but they do not direct the agent to access files, credentials, or external endpoints outside the stated purpose.
- Install Mechanism
- okNo install spec is provided (instruction-only), so nothing is written to disk and no external packages are fetched.
- Credentials
- okNo environment variables, credentials, or config paths are requested; this is appropriate for a template-driven content-authoring skill.
- Persistence & Privilege
- okalways:false (default) and the skill does not request elevated persistence or modify other skill/system configurations.
