Back to skill
Skillv1.0.0
ClawScan security
Content Hot Tracker · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 14, 2026, 3:08 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only tracker that uses web searches to find and analyze public trending content; it requests no installs or credentials and its instructions match its stated purpose.
- Guidance
- This skill is internally consistent and doesn't ask for secrets or install code, but consider the following before enabling: (1) it relies on your agent's web_search/browser tool — verify what that tool logs or shares (searches may be recorded); (2) scraping or reusing content from some platforms can violate their terms — confirm you're allowed to collect and republish the material you gather; (3) the skill notes some platforms may need a VPN or authenticated access — if you later grant the agent credentials or plugins that access accounts, re-evaluate permissions because that would increase risk; (4) results are based on public search and heuristics — validate suggestions and check for hallucinations or stale data.
Review Dimensions
- Purpose & Capability
- okName/description (multi-platform hotspot tracking and content suggestions) match the SKILL.md: it instructs the agent to perform web searches, analyze trends, and generate topic/title suggestions. No unrelated binaries, env vars, or config paths are requested.
- Instruction Scope
- okRuntime instructions are limited to performing web_search queries, simple trend analysis, and producing suggested outputs. The SKILL.md does not instruct reading local files, accessing credentials, or sending data to unexpected remote endpoints. It does instruct broad web scraping/searching of public content, which is consistent with its purpose.
- Install Mechanism
- okNo install spec and no code files — the skill is instruction-only, so nothing is written to disk and no third‑party packages or downloads are required.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The requested capabilities are proportional to a public-content tracking tool. Note: actual privacy depends on how the platform's web_search tool is implemented (search logs, rate limits, or linked authenticated tools could change this assessment).
- Persistence & Privilege
- okalways is false and there is no self-install behavior or requests to modify other skills or system settings. The skill runs only when invoked and does not request permanent elevated presence.