Back to skill
Skillv1.1.0
ClawScan security
HTML Report Slides · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 22, 2026, 3:19 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only HTML slide generator whose requirements and instructions are coherent with its stated purpose (no unexpected credentials, installs, or network exfiltration).
- Guidance
- This skill appears internally consistent and only manipulates templates and local files. Before installing: (1) review the included example HTML files locally to confirm they meet your expectations; (2) be aware CSS imports fetch Inter from fonts.googleapis.com (font fetch when rendering); (3) the skill writes generated HTML to your workspace (default root) — ensure you are comfortable with that output location; (4) README suggests optional git clone/ClawHub install if you prefer installing from the repo — only do so from a source you trust; (5) do not paste secrets or sensitive credentials into slide content or uploaded examples, and if you publish to static hosts, review the generated file for any internal names you want to redact.
Review Dimensions
- Purpose & Capability
- okName/description (generate a single-file HTML PPT-style report) matches the content of SKILL.md and the included HTML/CSS examples and components. No credentials, binaries, or unrelated capabilities are requested.
- Instruction Scope
- noteSKILL.md instructs the agent to ask for inputs, pick templates/components, copy/modify example HTML files, and write the generated HTML to a user-specified output path (default: workspace root). These are expected for a template-based generator, but be aware the skill writes files into the workspace and references preview/deploy workflows (preview_url, static hosting).
- Install Mechanism
- okThere is no install spec (instruction-only), so nothing will be downloaded or executed automatically by the platform. README suggests optional manual git clone or a ClawHub install command, which are external actions the user would perform; those are not part of runtime behavior.
- Credentials
- okThe skill declares no environment variables, no credentials, and no config paths. Its needs (HTML/CSS templates, local file write) are proportionate to producing HTML slides.
- Persistence & Privilege
- okalways is false and the skill does not request persistent or cross-skill configuration. It operates as a normal user-invokable skill and does not claim elevated privileges.