Back to skill
Skillv3.0.0
ClawScan security
Unixtime · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 19, 2026, 10:39 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code and instructions match its stated purpose (simple local timestamp/date utilities) and request no unusual permissions or secrets.
- Guidance
- This skill appears coherent and low-risk: it performs local time/epoch conversions using a Bash script and standard utilities, requests no secrets, and has no network calls. As with any third‑party script, inspect the source (you already have scripts/script.sh) before running and consider executing in a limited/isolated environment if you have stricter security policies. If you want absolute assurance, review the remainder of the script (the manifest showed the file was truncated in the listing) to confirm there are no unexpected commands near the end.
Review Dimensions
- Purpose & Capability
- okName/description (convert Unix timestamps, countdowns, ranges) align with the provided SKILL.md and the included Bash script which implements those utilities. There are no extra capabilities (cloud, networking, or unrelated tooling) requested.
- Instruction Scope
- okSKILL.md contains concrete CLI commands and usage limited to timestamp/date conversions. The runtime instructions and the script only reference standard local utilities (date, awk, printf, optional python3) and do not read unrelated files, environment secrets, or send data externally.
- Install Mechanism
- okNo install spec is present (instruction-only skill with an included script). No network downloads, package installs, or archive extraction are performed by an installer. The only runtime dependency is optional python3 and standard Unix utilities.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths, and the script does not access any secrets or external credentials. The optional use of python3 is only to compute milliseconds locally.
- Persistence & Privilege
- okThe skill is not always-enabled and has no special persistence or elevated privileges. It does not modify other skills or system-wide agent settings.