Back to skill
Skillv0.1.0
ClawScan security
Geo Conversion Optimizer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 6:22 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's requests, instructions, and included code are consistent with its stated purpose (GEO + conversion content optimization) and do not ask for unrelated credentials or perform risky installs.
- Guidance
- This skill appears coherent and low-risk: it contains a prose playbook and a small Python helper module (dataclasses) with no network calls, no install steps, and no credential requests. Before using it, avoid pasting credentials or private keys into prompts; when auditing pages, provide only the content you intend the skill to analyze (page copy, metrics snapshots), and keep production analytics credentials or site admin credentials out of the conversation. If you need absolute assurance, inspect the included files yourself (they are short and readable) or run them in an isolated environment first.
Review Dimensions
- Purpose & Capability
- okName/description (GEO conversion optimization) match the SKILL.md, playbook, and the helper Python file. No unrelated binaries, env vars, or config paths are requested.
- Instruction Scope
- okRuntime instructions in SKILL.md describe clarifying goals, auditing provided content, producing blueprints and experiment plans. These steps stay within expected scope (they ask to review user-provided pages/content, not system files or secrets).
- Install Mechanism
- okNo install spec is provided (instruction-only skill). No downloads, package installs, or archive extraction are present. This minimizes disk-write and supply-chain risk.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The included script is a small, local helper module with no network or credential use.
- Persistence & Privilege
- okFlags are default (always: false, user-invocable true). The skill does not request permanent presence or elevated agent-wide privileges.