Back to skill
Skillv1.0.0
ClawScan security
Barrick Gold · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 30, 2026, 1:08 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is a read-only informational skill about Barrick Gold that requests no permissions, installs nothing, and contains only static content — low technical risk, but verify factual claims from authoritative sources before relying on them.
- Guidance
- This skill is informational and technically low risk (no installs, no secrets). Before using it for decisions (investing, reporting), independently verify the numeric claims and statements since no source or homepage is provided. It's safe to enable from a permissions perspective, but do not treat its factual assertions as authoritative without cross-checking. If you want higher confidence, ask the publisher for sources or prefer skills that cite official reports or add links to primary data.
Review Dimensions
- Purpose & Capability
- noteThe skill's name and description match the SKILL.md content (company history, business model, metrics). However, the skill has no source/homepage and provides factual claims (revenues, rankings, production) without citation — this is a provenance/accuracy note rather than a security mismatch.
- Instruction Scope
- okSKILL.md is static, contains a short summary, 'read_when' triggers and topical content. It does not instruct the agent to read files, access environment variables, call external endpoints, or transmit data.
- Install Mechanism
- okNo install spec and no code files — instruction-only. Nothing will be written to disk or downloaded during install.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. There is no request for secrets or external service access.
- Persistence & Privilege
- okDefaults are used (always:false, autonomous invocation allowed). The skill does not request elevated persistence or modify other skills/config. Autonomous invocation is normal and not a concern here given the skill's passive nature.