Back to skill
Skillv1.0.0
ClawScan security
Bhp · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 30, 2026, 1:08 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only informational skill about the mining company BHP; it does not request credentials, install software, or instruct the agent to access unrelated system resources.
- Guidance
- This skill is an offline informational prompt about BHP and appears internally consistent and low-risk. However, note that the skill has no listed source or homepage and an unknown owner — that affects trustworthiness of the content (potential for outdated or inaccurate facts). If you will rely on this for investment or operational decisions, cross-check facts with authoritative sources (company filings, official website, reputable financial data providers).
Review Dimensions
- Purpose & Capability
- okName, description and SKILL.md content all describe an informational/company-research skill about BHP; there are no unrelated requirements (no env vars, binaries, or config paths).
- Instruction Scope
- okSKILL.md contains only company history, business model, and suggested read contexts; it does not instruct the agent to read files, call external endpoints, or access secrets beyond what is declared (none).
- Install Mechanism
- okNo install specification or code files are present (instruction-only), so nothing will be written to disk or installed.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths — proportional to an informational skill.
- Persistence & Privilege
- okSkill is not always-on and does not request elevated persistence or modify other skills or system settings.