Back to skill
Skillv1.0.0
ClawScan security
AI Status - Real-time AI Provider Status · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 11, 2026, 4:19 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is instruction-only and its requests, tooling, and scope align with its stated purpose of querying aistatus.cc for provider/model status information.
- Guidance
- This skill appears coherent and low-risk because it only instructs the agent to fetch public endpoints from https://aistatus.cc and parse results. Before installing, consider: (1) Source trust — the skill's source/homepage is unknown, so verify aistatus.cc is reputable and that you trust its data; (2) Privacy — queries will be sent to a third-party domain (WebFetch network calls); avoid sending sensitive text in queries; (3) Accuracy & availability — the skill reports third-party status data that may be incomplete or stale; consider cross-checking with provider status pages for critical decisions; (4) Monitoring — because the skill performs network requests, watch for unexpected outbound traffic patterns. If any of these concerns matter, review the aistatus.cc site and its privacy/security posture before enabling the skill.
Review Dimensions
- Purpose & Capability
- okName/description match the instructions: the SKILL.md exclusively instructs the agent to call aistatus.cc endpoints to fetch provider status, model search, trending, leaderboard, and incidents. No unrelated credentials, binaries, or system access are requested.
- Instruction Scope
- okRuntime instructions are narrowly scoped: use WebFetch to call specific aistatus.cc endpoints, parse JSON, and present results. The instructions do not ask the agent to read local files, other env vars, or send data to unrelated endpoints.
- Install Mechanism
- okThere is no install spec and no code files; the skill is instruction-only which minimizes disk/write risk. No downloads or package installs are specified.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The functionality described (public API calls) does not require secrets, so the lack of credential requests is proportionate.
- Persistence & Privilege
- okThe skill is not marked always:true and does not request any persistent system-wide configuration changes. It can be invoked by the user and (per default platform behavior) may be called autonomously by the agent, which is normal.