Back to skill
Skillv1.0.0
ClawScan security
Bacardi · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 28, 2026, 9:02 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This skill is an instruction-only content piece about the Bacardi company; its declared purpose matches the instructions and it requests no permissions, installs, or credentials.
- Guidance
- This appears to be a simple informational skill with no installs, no credential requests, and no surprising instructions — safe from a permissions standpoint. Before using it for important decisions, note the source/homepage is unknown and the SKILL.md is a static summary: verify facts against official Bacardi or reputable business sources if you need authoritative or up-to-date data. If you require automated actions, integrations, or access to private data, this skill does not provide those capabilities.
Review Dimensions
- Purpose & Capability
- okThe name/description and SKILL.md all describe Bacardi company history, portfolio, and analysis; nothing in the package asks for unrelated capabilities or credentials.
- Instruction Scope
- okSKILL.md is a read-only informational document (company history, metrics, analysis). It does not instruct the agent to read local files, access environment variables, call external endpoints, or perform operations outside the stated topic.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill (lowest install risk). Nothing will be written to disk or downloaded at install time.
- Credentials
- okThe skill declares no required environment variables or credentials; it requests no config paths or secrets, which is proportionate to an informational skill.
- Persistence & Privilege
- okFlags are default (always: false, user-invocable: true, model invocation allowed). The skill does not request permanent presence or elevated privileges.