Back to skill
Skillv1.0.0

ClawScan security

cisco-asa-syslog · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 4, 2026, 4:09 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill's files and runtime instructions are coherent with its stated purpose of parsing and interpreting Cisco ASA syslog messages and do not request unrelated credentials, installs, or persistent privileges.
Guidance
This skill appears to only provide offline guidance and reference material for parsing Cisco ASA syslog messages and does not request credentials or install code. Before using it on sensitive logs, consider that any logs you paste into the agent may contain IPs, usernames, or other sensitive data; avoid pasting credentials or full packet captures. If you plan to integrate this guidance into automation that processes live logs, verify that automation does not send logs to third-party endpoints and that the agent's environment enforces data handling policies.

Review Dimensions

Purpose & Capability
okName/description match contents: the SKILL.md and large reference docs are focused on ASA syslog format, message IDs, severity, and parsing guidance. Nothing requested (env vars, binaries, installs) is out of scope.
Instruction Scope
okRuntime instructions provide parsing rules, regexes, severity handling, and interpretation guidance. The instructions do not direct reading unrelated system files, exfiltrating data, contacting external endpoints, or accessing secrets.
Install Mechanism
okNo install spec and no code files — instruction-only skill. This minimizes disk/write/execute risk and matches the declared metadata.
Credentials
okThe skill requires no environment variables, credentials, or config paths. That is proportionate for a log-parsing guidance skill.
Persistence & Privilege
okalways is false and model invocation is allowed (platform default). The skill does not request elevated or persistent system presence or modify other skills/configuration.