Back to skill
Skillv1.0.0
ClawScan security
cn-unit-converter · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 3:09 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is internally consistent with its stated purpose (a local Python-based unit converter), requests no credentials or installs, and its code contains only straightforward conversion logic using the standard library.
- Guidance
- This appears to be a simple, local Python unit converter. Before installing, ensure you have python3 available in the runtime environment and review the small script if you want to confirm unit mappings. The skill does not request network access, credentials, or write/install anything, so its behaviour is low-risk; if you run agents in highly restricted environments, confirm executing arbitrary local scripts is acceptable for your use case.
Review Dimensions
- Purpose & Capability
- okName/description match the included code and SKILL.md: a unit-conversion tool implemented in a small Python script. There are no extraneous credentials, binaries, or unrelated dependencies.
- Instruction Scope
- okSKILL.md instructs the agent to run the local script with three arguments (value, source unit, target unit). The instructions do not ask the agent to read unrelated files, access environment variables, or transmit data externally.
- Install Mechanism
- okNo install spec; the skill includes a small script and relies only on the Python standard library. Nothing is downloaded or written to disk beyond the provided file.
- Credentials
- okNo environment variables, credentials, or config paths are requested. The script uses only sys and json from the standard library and performs local numeric computations.
- Persistence & Privilege
- okSkill does not request permanent presence (always:false) and does not modify other skills or system configuration. It can be invoked normally by the agent.