Back to skill
Skillv1.0.0
ClawScan security
Balacodingagent · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 6, 2026, 9:56 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only coding assistant whose requested capabilities, instructions, and requirements are internally consistent and proportional to its stated purpose.
- Guidance
- This skill is instruction-only and coherent with its described purpose. Main practical cautions: (1) the skill will produce code and shell/compile commands — review and understand any code or commands before running them on your system, especially if they touch files or install packages; (2) do not paste secrets (API keys, passwords) into prompts when asking for debugging help; (3) the skill requests no credentials or installs, so it's low-risk from a permissions perspective, but always validate generated code for correctness and security before using it in production.
Review Dimensions
- Purpose & Capability
- okName and description (generate, review, debug code) match the SKILL.md instructions. The skill declares no binaries, env vars, or install steps — reasonable for an instruction-only coding assistant.
- Instruction Scope
- okRuntime instructions are limited to acting as a senior software engineer: produce code, check edge cases, explain choices, and include run/compile commands. The SKILL.md does not instruct the agent to read files, environment variables, system paths, or transmit data to external endpoints.
- Install Mechanism
- okNo install spec and no code files are present, so nothing will be written to disk or installed. This is the lowest-risk installation profile.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. There is no apparent need for additional secrets or external services for the stated functionality.
- Persistence & Privilege
- okDefaults are used (always: false, agent invocation allowed). The skill does not request persistent or elevated privileges and does not modify other skills or system-wide settings.