Skillv1.0.0

ClawScan security

organizing-officer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 6, 2026, 11:35 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This instruction-only skill is internally coherent with its stated purpose (organizational diagnosis and advisory) and does not request extra credentials, installs, or unrelated system access.
Guidance: This skill is coherent and low-risk in terms of system access, but note the source and homepage are unknown — the content is unvetted. Before using: (1) avoid pasting confidential or identifiable personnel data into the chat; (2) treat its recommendations as advisory (validate major organizational changes with human experts/legal counsel); and (3) review the included reference files to ensure the frameworks match your context. If you need guarantees about provenance or auditability, prefer a skill from a known publisher or consult an accredited consultant.

Purpose & Capability: okName/description (organizational design, talent, culture, strategy) align with the SKILL.md and included reference docs; nothing in the package requests unrelated capabilities or credentials.
Instruction Scope: okRuntime instructions are limited to asking the user about organization state, applying internal frameworks (the five reference docs), performing diagnosis, and producing recommendations. There are no instructions to read local files, environment variables, or send data to external endpoints.
Install Mechanism: okNo install spec and no code files that would be written to disk — lowest-risk instruction-only skill.
Credentials: okThe skill declares no required environment variables, credentials, or config paths; the guidance does not attempt to access external service tokens or system secrets.
Persistence & Privilege: okFlags show always:false and normal autonomous invocation settings. The skill does not request persistent presence or modifications to other skills or system-wide settings.