Back to skill
Skillv1.0.0
ClawScan security
Academic Writing Assistant · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 14, 2026, 5:56 AM
- Verdict
- benign
- Confidence
- medium
- Model
- gpt-5-mini
- Summary
- The skill's stated purpose (academic writing, polishing, citation formatting) matches the instructions and metadata; there are no unexpected credential or install requests, but note this is instruction-only and ships no runnable code.
- Guidance
- This is an instruction-only skill: it contains detailed guidance and CLI examples but no code or installer. Before installing or relying on it, note: (1) the examples call a local python script (academic_writing.py) that is not included — the skill will not provide that executable for you; (2) some features (e.g., DOI validation) likely require network access if implemented, but no endpoints or credentials are declared; (3) because no code is bundled, there is nothing to run by default — if you want a runnable tool, obtain an implementation from a trusted source or the maintainer; (4) the skill does not request secrets or special privileges, so it is internally coherent, but verify any external scripts or services you connect to when implementing these instructions.
Review Dimensions
- Purpose & Capability
- okThe name, description, openclaw.skill.json capabilities, and SKILL.md are consistent: paragraph writing, polishing, style and citation checks are all described and justified by the content.
- Instruction Scope
- noteSKILL.md contains detailed runtime examples that call a python script (python academic_writing.py ...) and references local input/output files and batch directories. However, no code is included with the skill, so those examples are illustrative only — the skill itself provides instructions rather than an executable. There are mentions of DOI validation which implies potential network lookups, but no explicit external endpoints are specified.
- Install Mechanism
- okNo install spec is present (instruction-only). This minimizes on-disk changes and third-party downloads. Nothing is written to disk by an installer within the package.
- Credentials
- okThe skill requests no environment variables, no credentials, and no config paths. That matches the documented functionality and is proportionate to an instruction-only writing assistant.
- Persistence & Privilege
- okThe skill does not request always:true and uses default invocation settings. It does not modify other skills or system configuration in the provided files.