Back to skill
Skillv1.0.0
ClawScan security
Realpath Tool · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMay 1, 2026, 4:55 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5.5
- Summary
- This skill simply resolves a supplied file path to its canonical absolute path and does not show suspicious behavior.
- Guidance
- This appears safe for its intended purpose of resolving paths. Be aware that it may reveal the absolute location of a file or directory you ask it to resolve, which is expected for this kind of tool.
Review Dimensions
- Purpose & Capability
- okThe stated purpose is narrow path resolution, and the included Python script only calls os.path.realpath on one provided argument or the current directory.
- Instruction Scope
- okThe instructions describe manual use of a path-resolution command and do not ask the agent to perform unrelated actions, access credentials, or modify files.
- Install Mechanism
- okThere is no install specification, package download, dependency installation, or remote setup step shown.
- Credentials
- okResolving local paths is proportionate to the skill purpose; the artifacts do not show network access, broad file reading, file writes, or account access.
- Persistence & Privilege
- okThe artifacts do not request persistence, elevated privileges, credentials, background execution, or long-running behavior.
