Back to skill
Skillv1.0.0

ClawScan security

News Summary Local · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMay 1, 2026, 7:10 AM
Verdict
Benign
Confidence
high
Model
gpt-5.5
Summary
This skill appears to only extract titles from a local RSS/XML file, with no evidence of network access, credential use, persistence, or destructive actions.
Guidance
This looks like a simple local shell-based RSS title extractor. Before using it, ensure the RSS file path is the file you intend to summarize and run the provided scripts from their expected directory.

Review Dimensions

Purpose & Capability
okThe documented purpose is local RSS/XML title extraction, and the included scripts only read a specified file and print up to 10 title lines.
Instruction Scope
okInstructions are user-directed and limited to running the summary script with a local RSS file path.
Install Mechanism
okThere is no install step, no external download, and no package dependency or remote code source shown in the artifacts.
Credentials
okLocal file access is proportionate to the skill’s RSS/XML summarization purpose, and artifacts do not show broad filesystem scanning or data transmission.
Persistence & Privilege
okNo persistence mechanism, privileged access, credential use, or background behavior is shown.