Back to skill
Skillv2.0.0
ClawScan security
Ansible Ui · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 17, 2026, 7:07 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is internally consistent and lightweight: it contains simple, local shell stubs that log to a per-user data directory and does not request credentials, external network access, or elevated privileges.
- Guidance
- This skill is lightweight and does not ask for credentials or perform network calls. It will create and write logs under ~/.local/share/ansible-ui/ (or $XDG_DATA_HOME/ansible-ui) — expect history.log and related files. The description overstates capabilities (no real UI/API shipped in these files); if you expected a full GUI or service, inspect the upstream repo/releases before relying on it. If you want extra caution, run it in an isolated environment or review the GitHub source linked in SKILL.md.
Review Dimensions
- Purpose & Capability
- noteThe description advertises a "Modern UI and powerful API" for Ansible/Terraform/etc., but the included files are small bash stubs that implement a CLI help/status/test workflow and do not provide a UI or networked API. This looks like an overpromise or a minimal wrapper rather than a full UI/API implementation, but it is not inconsistent with the files shipped.
- Instruction Scope
- okSKILL.md instructs the agent to run ansible-ui commands. The shipped scripts only create a local data directory (default ~/.local/share/ansible-ui or $XDG_DATA_HOME), write simple history/log files, and print messages — they do not read other system files, access secrets, or contact external endpoints.
- Install Mechanism
- okNo install spec or external downloads are present. This is an instruction-only skill with two included shell scripts; nothing will be fetched from the network during install.
- Credentials
- okNo required environment variables, credentials, or config paths are declared. The scripts honor an optional ANSIBLE_UI_DIR/XDG_DATA_HOME to control where they write data, which is proportional to the skill's behavior.
- Persistence & Privilege
- okThe skill does create and write files in the user's data directory (~/.local/share/ansible-ui by default) but does not request persistent platform privileges, set always:true, or modify other skills' config. File writes are limited to its own data directory.