Back to skill
Skillv1.0.0
ClawScan security
Claw Skills · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 10, 2026, 5:38 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only helper that generates plugin/skill skeletons and run/publish commands; its declared requirements and instructions are internally consistent and proportional to that purpose.
- Guidance
- This skill is instruction-only and appears coherent for generating OpenClaw plugin/skill scaffolds. Before running any generated install, publish, rollback, or debug commands, review them carefully — especially commands that use sudo, modify system files, or include tokens/registry publish steps. If you plan to publish to a registry (npm or similar), do not paste credentials into the chat; supply only the minimal, secure configuration during your real publish step. If you want stricter safety, ask the assistant to produce commands without destructive operations and to mark any steps that require elevated privileges or external credentials.
Review Dimensions
- Purpose & Capability
- okName and description (OpenClaw plugin/skill scaffolding) match the content of SKILL.md: it instructs the agent to produce minimal plugin/skill skeletons, install/debug/publish/rollback commands and troubleshooting guidance. It does not request unrelated credentials, binaries, or config paths.
- Instruction Scope
- okRuntime instructions are limited to generating files, commands, and diagnostic steps. The SKILL.md does not tell the agent to read user files, system state, or environment variables, nor to transmit data to external endpoints. It does require that generated commands be directly executable, so consumers should review commands before running them.
- Install Mechanism
- okNo install spec or shipped code is present (instruction-only). There is nothing written to disk by the skill itself and no external downloads are requested.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths—all appropriate for a scaffolding/instruction-only helper. There are no requests for unrelated secrets.
- Persistence & Privilege
- okalways is false and the skill is user-invocable with normal model invocation allowed. It does not request persistent installation, nor does it modify other skills or agent-wide settings.