Back to skill
Skillv1.0.1
ClawScan security
Antd · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 27, 2026, 3:47 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only documentation skill that provides Ant Design usage examples and does not request credentials, run installs, or perform unexpected actions — its footprint matches its stated purpose.
- Guidance
- This skill is a documentation pack of Ant Design examples and is internally consistent with its description. Before copying example code into a real project: (1) install antd and @ant-design/icons from the official npm registry as shown in the README; (2) verify the package versions you use; (3) review and sanitize any example data before using it in production (e.g., remove placeholder emails/phone numbers); and (4) prefer official upstream libraries (https://ant.design, npm) when adding dependencies. If you need higher assurance, confirm the skill author/source or prefer official docs.
Review Dimensions
- Purpose & Capability
- okName/description claim to teach Ant Design 5 usage for React 18+ and the files are documentation and component examples that match that purpose. Declared dependencies (React, antd, @ant-design/icons) are appropriate for the stated goal.
- Instruction Scope
- okSKILL.md and other documents only provide guidance, usage examples, and local file path for placement. There are no instructions to read unrelated files, access secrets, contact external endpoints, or execute arbitrary commands.
- Install Mechanism
- okNo install spec is present (instruction-only), so nothing is downloaded or written by the skill. README examples show normal npm/yarn install commands for developers using antd in their projects — expected and proportionate.
- Credentials
- okThe skill does not request environment variables, credentials, or config paths. Example code is client-side React code and does not attempt to access system secrets or unrelated services.
- Persistence & Privilege
- okSkill is not forced always-on (always:false) and does not request elevated platform privileges or modify other skills. It is documentation-only and has normal, limited presence.