Skillv2.0.1

ClawScan security

Registration · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 18, 2026, 1:47 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is internally consistent: it implements a simple local CLI that stores logs under ~/.local/share/registration, requires no credentials or network access, and its files and instructions match its stated purpose.
Guidance: This skill appears to be a simple local CLI that keeps logs at ~/.local/share/registration and does not contact external services or request secrets. Before installing, review the script if you will store sensitive PII (it writes plaintext logs) and consider encrypting or restricting access to the data directory. To remove the skill's data, delete ~/.local/share/registration. If you want networked backups or integrations, ensure those are added explicitly and reviewed — current version does not perform any network I/O.

Purpose & Capability: okName/description promise a local registration helper. The provided script and SKILL.md implement a local CLI that logs entries and exports formats; requested resources (none) align with that purpose.
Instruction Scope: okSKILL.md tells the agent to run local registration commands and points to local data. The included script operates only on DATA_DIR (~/.local/share/registration) and standard shell utilities (grep, tail, du, wc), and does not read unrelated system files or send data externally.
Install Mechanism: okNo install spec; the skill is effectively instruction+script. There are no downloads or package installs declared and no archive extraction — minimal risk from the install mechanism.
Credentials: okThe skill requires no environment variables, credentials, or config paths. The single path it uses (DATA_DIR under the user's HOME) is proportional to its stated function.
Persistence & Privilege: okalways is false and model invocation is default. The skill stores its own data under the user's home directory only; it does not modify other skills or system-wide configuration.