Skillv0.1.0

ClawScan security

Algorithmic Art · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 12, 2026, 5:51 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's files, runtime instructions, and requested resources are consistent with creating p5.js algorithmic art and do not request unrelated credentials or installs.
Guidance: This skill appears coherent for generating p5.js algorithmic art. Things to consider before installing: (1) The SKILL.md asks the agent to repeatedly assert that output is 'meticulously crafted' and 'master-level' — this is a stylistic instruction that may produce exaggerated promotional text; consider removing or softening it if you want neutral descriptions. (2) The viewer.html loads p5.js from a CDN (cdnjs) and Google Fonts; opening the HTML will fetch resources from those external hosts — if you need fully offline artifacts, replace CDN links with local copies. (3) The template mentions 'Anthropic branding' in the viewer; check trademark/branding requirements if you plan to publish outputs. (4) License: included Apache 2.0 appears standard for reuse. Overall there are no requests for secrets, installs, or hidden network endpoints — the skill is internally consistent and functionally appropriate for its stated purpose.

Purpose & Capability: okName/description (algorithmic art with p5.js) align with the included templates (.js + .html) and SKILL.md instructions. No unrelated binaries, credentials, or config paths are requested.
Instruction Scope: noteSKILL.md is focused on producing an 'algorithmic philosophy' (.md) and p5.js .html/.js artifacts — that matches the templates. Two points to note: (1) the instructions explicitly ask the AI to repeatedly emphasize phrases asserting 'master-level' craftsmanship, which is stylistically unusual and may cause verbose, promotional output but is not a security issue; (2) the viewer.html references external CDNs (p5.js and Google Fonts) so opening generated HTML will load external resources.
Install Mechanism: okNo install spec — instruction-only with template files. No downloads, package installs, or archive extraction are specified.
Credentials: okThe skill requires no environment variables, credentials, or config paths. The templates and SKILL.md do not access secrets or system files.
Persistence & Privilege: okalways is false, and the skill is user-invocable. It does not request permanent presence or modify other skills or system settings.