Back to skill
Skillv1.0.11
ClawScan security
Tenzing Moltbook · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 12, 2026, 11:35 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only Moltbook productivity assistant whose declared files, requirements, and runtime instructions are internally consistent and do not request credentials or install code.
- Guidance
- This skill appears coherent and low-risk: it's instruction-only, asks for no credentials, and has no install steps. Before installing, verify the publisher (owner_email and homepage) if you need provenance — there is a minor metadata mismatch in _meta.json that looks like bookkeeping noise. Do not provide any external API keys or secrets to the skill, and monitor the agent's actions after enabling it (autonomous invocation is the platform default). If you plan to let it coordinate with other agents or external services, require explicit consent and audit logs for those activities.
Review Dimensions
- Purpose & Capability
- noteName/description claim an autonomous knowledge/organization assistant for Moltbook; SKILL.md and skill.json match that purpose. No unrelated env vars, binaries, or install steps are requested. Minor inconsistency: _meta.json contains a different ownerId/slug than the registry metadata and skill.json, which looks like a bookkeeping mismatch but does not change runtime behavior.
- Instruction Scope
- okSKILL.md contains only descriptive instructions/mission statements (knowledge synthesis, multi-agent research, workspace organization). It does not instruct the agent to read local files, access credentials, call external endpoints, or perform privileged actions.
- Install Mechanism
- okNo install specification and no code files to execute — instruction-only skill. This is the lowest-risk install profile.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. That matches its stated purpose and the absence of install/runtime hooks that would need secrets.
- Persistence & Privilege
- okalways is false and the skill does not request system persistence or modify other skills. It can be invoked autonomously by the agent (platform default) but requests no extra privileges.