Back to skill
Skillv1.0.0

ClawScan security

Agent Monetization Strategies · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 16, 2026, 3:41 PM
Verdict
Benign
Confidence
high
Model
gpt-5-mini
Summary
This is an instruction-only, informational skill about monetization strategies for AI agents; its contents and required footprint are consistent with its stated purpose and it does not request or install extra permissions or credentials.
Guidance
This skill is an informational guide and appears internally consistent, but before acting on its recommendations: verify the legitimacy of the referenced platforms/URLs (e.g., confirm domain names), do not paste API keys or secrets into prompts, avoid embedding credentials into SKILL.md or sample files, and review any third-party marketplaces' fees and legal terms before registering or listing services.

Review Dimensions

Purpose & Capability
okThe name/description match the SKILL.md content: guidance on revenue models, platform strategies, pricing, and templates. The skill requests no binaries, installs, or credentials — appropriate for an informational monetization guide. The SKILL.md mentions platform registration and API keys as user actions but the skill itself does not require those secrets.
Instruction Scope
okRuntime instructions are purely descriptive: business models, pricing frameworks, example JSON for service listings, and suggested file layouts. The doc does not direct the agent to read system files, environment variables, or transmit data to external endpoints on its own.
Install Mechanism
okNo install specification and no code files — lowest-risk instruction-only skill. Nothing will be downloaded or written to disk by the skill itself.
Credentials
okThe skill declares no required environment variables, credentials, or config paths. It references obtaining API keys from external platforms (as expected for real-world use) but does not request them or require storing them in the agent environment.
Persistence & Privilege
okalways is false and the skill does not request persistent system presence or modify other skills/settings. It can be invoked by the agent (normal default) but contains no privileged actions.