Back to skill
Skillv1.0.0
ClawScan security
Material Design 3 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 1, 2026, 9:59 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is a documentation/reference skill about Material Design 3; its requirements and instructions are consistent with that purpose and it asks for no credentials or installs.
- Guidance
- This skill is a reference/manual for Material Design 3 and appears internally consistent and low risk because it is instruction-only and requests no credentials or installs. Consider that the skill's source and homepage are unspecified—if provenance matters to you, prefer official Google Material docs (m3.material.io) or verify the author before trusting subtle implementation advice. Also note that while the agent may invoke this skill autonomously by default, it has no access to credentials or system files, so the autonomous blast radius is minimal.
Review Dimensions
- Purpose & Capability
- okThe skill's name and description match the SKILL.md contents: a design reference covering Dynamic Color, type, components, shapes, motion, and platform guidance. There are no unrelated requirements (no env vars, binaries, or installs) that would be inconsistent with a documentation/reference skill.
- Instruction Scope
- okSKILL.md is purely explanatory: guidance, tables, and code snippets (Compose/CSS examples). It does not instruct the agent to read arbitrary files, access system configuration, transmit data to external endpoints, or run commands. The only external link is the official Material Theme Builder site, which is appropriate for this purpose.
- Install Mechanism
- okThere is no install spec and no code files. As an instruction-only skill, it does not write to disk or download executables, which is the lowest-risk install model.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. Nothing in the content asks for secrets or unrelated credentials; requested access is proportional (none).
- Persistence & Privilege
- okFlags: always is false (normal), user-invocable true, and model invocation is allowed (default). That combination is standard and acceptable for a passive documentation skill; it does not request persistent system privileges or modify other skills' configs.