Back to skill
Skillv1.0.0
ClawScan security
Less Tool · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 4:55 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- Instruction-only skill that documents a file viewer (less-like) and is internally consistent aside from a minor mismatch about declaring the required binary; no credentials or install steps are requested.
- Guidance
- This skill is instruction-only and appears to only document how to use a less-style file viewer. Before installing/using: 1) Note the SKILL.md invokes a 'less-tool' binary but the metadata doesn't declare or provide an install—ensure a trusted pager (like less) is available on your system or that you understand what 'less-tool' refers to. 2) The skill will need access to any file you ask it to open — avoid opening sensitive files (password stores, private keys, system tokens) unless you trust the agent and environment. 3) Because it has no install and no credentials, the technical risk is low; if you want tighter control, restrict agent file access or require explicit user approval before the agent opens files.
Review Dimensions
- Purpose & Capability
- noteThe name/description and SKILL.md consistently describe an interactive file viewer (less-like). However, the instructions invoke a 'less-tool' binary while the skill metadata lists no required binaries or install steps—this is a small mismatch (the skill assumes a viewer is present but doesn't declare it).
- Instruction Scope
- okSKILL.md only documents how to view and navigate files (paging, search, navigation). It does not instruct the agent to read unrelated system files, environment variables, or to transmit data to external endpoints.
- Install Mechanism
- okNo install spec and no code files are present (instruction-only). This is the lowest-risk model: nothing will be written to disk or installed by the skill itself.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths—proportional to its stated purpose of viewing files.
- Persistence & Privilege
- okalways is false and there is no indication the skill modifies agent configuration or requests persistent privileges.