Back to skill
Skillv1.3.5
ClawScan security
Gingiris Launch · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 27, 2026, 5:35 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only Product Hunt / GTM playbook; its stated purpose matches the content and it does not request credentials, install code, or access system resources.
- Guidance
- This appears to be a documentation-only GTM/playbook and does not require credentials or installation. Before using: (1) verify the author/source links (the SKILL.md references a website and GitHub) to ensure authenticity, (2) treat tactics as advisory — some outreach/engagement tactics may conflict with Product Hunt, Reddit, Hacker News, or local laws/terms of service (avoid fake or paid votes/spam), and (3) do not supply any personal or platform credentials to this skill (none are required). If you plan to act on outreach templates, handle personal data and outreach ethically and in compliance with privacy/regulatory requirements.
Review Dimensions
- Purpose & Capability
- okName/description claim a GTM/Product Hunt playbook and the SKILL.md contains strategy, templates, and links to public resources (GitHub, website). There are no unrelated env vars, binaries, or installs requested.
- Instruction Scope
- okSKILL.md is a documentation/playbook; it does not instruct the agent to read local files, access hidden credentials, or exfiltrate data. External links point to public GitHub and the listed website, which is consistent with a content/resource skill.
- Install Mechanism
- okNo install spec and no code files — lowest-risk instruction-only skill. Nothing will be written to disk or fetched by an installer as part of installation.
- Credentials
- okNo environment variables, credentials, or config paths are requested; this is proportionate for a text-based playbook.
- Persistence & Privilege
- okSkill is not always-on and does not request special privileges or modify other skills; autonomous invocation is allowed by default but that is expected for skills and not a red flag here.