Back to skill
Skillv1.0.0
ClawScan security
MVP Builder · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 14, 2026, 2:02 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only skill that gives minimalist MVP-building advice; it declares no installs, no credentials, and its runtime instructions stay on-topic.
- Guidance
- This skill is a content-only advisor for quickly scoping and shipping an MVP; it does not request access to your system or secrets. Consider that: (1) any sensitive product ideas you paste into chat may be stored by the platform—avoid sharing secrets or proprietary IP you don't want retained; (2) the guidance is general advice, not legal/financial/technical implementation guarantees—validate payments, legal, and security steps yourself before launching; (3) if you later use tools recommended by the skill (Stripe, Gumroad, Zapier, etc.), you'll need to review and grant those services their own permissions separately.
Review Dimensions
- Purpose & Capability
- okSkill name/description (MVP guidance) match the contents of SKILL.md. It requests no binaries, env vars, or installs—consistent with an advice-only tool.
- Instruction Scope
- okSKILL.md contains only product-advice templates, checklists, and suggested outputs (define one thing, simplest implementation, weekend publish, pricing, feedback). It does not instruct reading files, accessing environment variables, or calling external endpoints.
- Install Mechanism
- okNo install spec and no code files—nothing will be written to disk or downloaded during install.
- Credentials
- okNo credentials, config paths, or environment variables are required or referenced; requested access is proportionate (none).
- Persistence & Privilege
- okalways is false and the skill is user-invocable; it does not request persistent presence or modify other skills or system settings.