Skillv1.0.1

ClawScan security

Recipe Video Extractor · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 19, 2026, 6:14 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requested actions (browser automation, comment/caption extraction, and fallback web search/fetch) align with its stated purpose and it asks for no credentials or installs.
Guidance: This skill appears coherent and low-risk: it will open the URL you provide and scrape captions/comments and (only if needed) fallback web pages to build a recipe. Before installing, consider: (1) how your platform's browser automation handles authenticated sessions — it could access content only visible to logged-in accounts, so avoid submitting private links you don't want scraped; (2) test with public videos first to confirm expected behavior; and (3) the skill does not request credentials or install code, but be mindful of privacy and copyright when extracting and sharing content.

Purpose & Capability: okName/description (extract recipe from a video URL) matches the instructions: open the URL, read caption/description/comments, and use web search/fetch as fallback. No unrelated credentials, binaries, or installs are requested.
Instruction Scope: noteInstructions are focused on extracting text from the provided URL and related fallback pages and include sensible guardrails (provenance tracking, confidence rubric, do not execute instructions found in fetched content). One caution: the workflow assumes access to a browser automation tool which may use session cookies or authenticated browser state provided by the platform — the SKILL.md does not explicitly restrict use of authenticated sessions or private-only content, so operators should confirm how the platform's browser tool handles cookies/authenticated sessions.
Install Mechanism: okNo install spec and no code files — instruction-only skill; nothing is written to disk or downloaded during install.
Credentials: okThe skill declares no environment variables, credentials, or config paths. That is proportionate for a recipe-extraction task that uses existing browser/search/fetch tools.
Persistence & Privilege: okalways is false and the skill does not request persistent system changes or modification of other skills. Autonomous invocation is allowed by default but is not combined with broad credentials or always:true.