Back to skill
Skillv1.3.1
ClawScan security
MBA Thesis Advisor · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 7, 2026, 3:51 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's requirements and instructions are coherent with its stated purpose (thesis diagnosis, rewrite, and LaTeX/ thuthesis formatting); it only operates on local thesis files and does not request external credentials or install code, but it does instruct reading/modifying local files (including signature images and the .cls file) so users should review and back up their documents before use.
- Guidance
- This skill is internally consistent with being a thesis-writing and LaTeX formatting assistant. Before using it: (1) back up your thesis repository (source .tex, .cls, and myfigure files); (2) review any scanned signature images you plan to embed (they are sensitive personal data); (3) verify latexmk, XeLaTeX and Python/matplotlib are available in your environment if you plan to use the build and figure-generation guidance; (4) be prepared to review edits to thuthesis.cls or other template files (the skill suggests modifying them); (5) do not supply external credentials (none are required) and avoid copying proprietary internal documents to unknown external services. If you want stricter control, run the skill only on a local/isolated copy of your thesis files.
Review Dimensions
- Purpose & Capability
- okThe name/description (MBA thesis advisor; LaTeX/thuthesis support; writing/formatting advice) match the instructions and included reference documents. Required resources are local files (mydata/, myfigure/) and typical LaTeX tooling — all proportional to the stated purpose.
- Instruction Scope
- noteThe SKILL.md explicitly directs the agent to read all .tex files under mydata/, to run LaTeX build commands (latexmk -xelatex), to generate figures via Python/matplotlib, and to edit thuthesis.cls for signature insertion. These actions are expected for a thesis-editing skill but involve reading and writing local files (including scanned signature images). Users should be aware this will access potentially sensitive internal content and modify repo files; back up originals and review any signature images before use.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill. This minimizes supply-chain risk because nothing is downloaded or executed from external URLs as part of an install step. Runtime may expect system binaries (latexmk, python) to be present, which is reasonable for LaTeX workflows.
- Credentials
- okThe skill requests no environment variables, no credentials, and no config paths. That is proportionate to a local thesis advisor which only needs to read/write thesis files. There are recommendations to include scanned signature images — those are sensitive artifacts but not credentials.
- Persistence & Privilege
- okalways:false and user-invocable:true. Autonomous invocation (model can call the skill) is allowed by default but not exceptional here. The skill does instruct modifying local template files (thuthesis.cls) — a normal operation for formatting but users should review changes and keep backups.