Skillv1.0.0

ClawScan security

Skill Dependency Chain Auditor · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 23, 2026, 2:28 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requested capabilities, tools, and runtime instructions are coherent with an auditor that fetches and analyses skill dependency metadata; nothing requested appears disproportionate or unrelated to that purpose.
Guidance: This skill appears internally consistent for auditing dependency chains. Before installing, confirm where it will fetch metadata from (public marketplace, vendor APIs, internal registries) and whether you need to provide credentials for private registries — the SKILL.md does not list endpoints or credential requirements. Because it uses curl and python3 at runtime, it will perform network requests and run analysis locally; if you are concerned about data leakage, run it in an environment with restricted network access or provide only limited/ephemeral credentials for private registries. If you need stronger assurance, ask the publisher for the exact data sources and a sample audit run so you can verify the tool's behavior and outputs.

Purpose & Capability: okName/description match the requested tools and behavior: auditing transitive dependency chains reasonably requires network access (curl) and analysis tooling (python3). No unrelated binaries, credentials, or config paths are requested.
Instruction Scope: noteSKILL.md is an instruction-only spec describing inputs and outputs but does not enumerate the data sources/endpoints it will query or how it will obtain audit records. That gives the agent discretion to use curl/python3 to fetch metadata from registries or public directories — expected for this auditor, but verify what registries or endpoints it will contact if you need to limit network access.
Install Mechanism: okNo install spec and no code files — lowest install risk. The skill is purely instruction-based and does not download or write archives to disk.
Credentials: okThe skill requests no environment variables, credentials, or config paths. For audits of private/internal registries you would need to supply credentials separately; absence of such variables is coherent for a public-auditing tool.
Persistence & Privilege: okalways:false and no privileged config modifications. Autonomous invocation is allowed (platform default) but there is no persistent presence or cross-skill config changes requested.