Back to skill
Skillv1.0.0

ClawScan security

Creative Fiction Writer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignFeb 25, 2026, 9:21 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This instruction-only skill is coherent with its stated purpose (writing adult fiction) and requests no unrelated credentials or installs, but it will automatically save generated stories to a path under the user's home directory.
Guidance
This skill appears to do what it says: generate adult fiction and save it locally. Before installing, consider that it will automatically create ~/clawd/writing/erotic/ and write story files there — check that you are comfortable with generated NSFW content being stored on disk, and whether you want to enable/disable automatic saving. Verify the agent/process has only the filesystem permissions you intend (or run the skill in an environment you control), and confirm you are complying with any platform/content rules and age/consent requirements. If you prefer not to have autosave, ask the skill author to make saving optional or to prompt the user before writing files.

Review Dimensions

Purpose & Capability
okName/description match the SKILL.md instructions. No required binaries, environment variables, or external services are requested that would be unrelated to a creative-writing skill.
Instruction Scope
noteThe runtime instructions are focused on prose, style, and safety constraints and do not instruct the agent to read other files or call external endpoints. However, the SKILL.md explicitly directs the agent to automatically create a directory and save each completed piece to ~/clawd/writing/erotic/{date}-{title-slug}.md — an automatic filesystem write that users should be aware of (privacy/storage implications). The instructions otherwise stay within the described scope.
Install Mechanism
okNo install specification or code files are present (instruction-only), which is the lowest-risk model for install mechanism.
Credentials
noteThe skill requests no environment variables or credentials. It does implicitly require write access to the user's home directory to implement its autosave behavior; that filesystem access is the only non-declared permission implied by the instructions.
Persistence & Privilege
okalways:false and no indication the skill modifies other skills or system-wide settings. It does persist generated content to disk, but does not request permanent platform-level privileges.