Skillv1.0.0

ClawScan security

Aon Plc · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 5:04 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This skill is an instruction-only informational brief about Aon plc and requests no credentials, installs, or system access — its footprint matches its stated purpose.
Guidance: This skill appears to be a simple informational briefing about Aon plc and is internally consistent. However, note that the source/homepage is unknown and the SKILL.md may contain summarized facts (revenue, employee counts, events) that can become outdated or be imprecise — verify important data against authoritative sources (Aon's official site, recent financial filings, or reputable news). Because it requests no credentials and has no install steps, it poses low technical risk, but treat factual content as informational only before making decisions based on it.

Purpose & Capability: okName/description (Aon plc — insurance broker/risk consultant) match the SKILL.md content (timeline, business model, metrics, analysis). The skill does not request unrelated binaries, env vars, or config paths.
Instruction Scope: okSKILL.md contains content and simple 'read_when' triggers for when to use the content; it does not instruct the agent to read files, access credentials, call external endpoints, or perform actions outside delivering informational responses.
Install Mechanism: okNo install spec and no code files — nothing is written to disk or downloaded. This is the lowest-risk pattern for a content-only skill.
Credentials: okThe skill requires no environment variables or credentials, so there is no disproportionate access requested relative to its informational purpose.
Persistence & Privilege: okalways is false, user-invocable is true, and model invocation is allowed (default). These are normal for a user-invocable informational skill and there is no request to modify other skills or system-wide settings.