Back to skill
Skillv1.0.0
ClawScan security
Boston Scientific · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 24, 2026, 1:03 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, informational skill about Boston Scientific; it requests no binaries, credentials, or installs and its behavior matches its description.
- Guidance
- This skill is an informational, instruction-only document about Boston Scientific and poses no obvious security risks (no installs, no secrets). Before relying on its claims for clinical, regulatory, or financial decisions, verify key facts (FDA approvals, sales figures, clinical performance) against authoritative sources (regulatory databases, company filings, peer-reviewed studies). If you plan to use the skill for decision-making in a regulated or clinical context, require citations and current references; do not treat the skill's statements as medical advice.
Review Dimensions
- Purpose & Capability
- okThe skill is a company/product informational skill. Its name, description, and SKILL.md all present corporate history, products, and market analysis. It declares no credentials, binaries, or install steps — consistent with an encyclopedia-style skill.
- Instruction Scope
- okSKILL.md contains only structured metadata and prose about Boston Scientific and cases when the agent should read it. It does not instruct the agent to read local files, environment variables, or transmit data to external endpoints. There is no scope creep evident in the runtime instructions.
- Install Mechanism
- okNo install specification or code is present (instruction-only). This is the lowest-risk installation model and matches the skill's informational purpose.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. There are no disproportionate secret or system access requests.
- Persistence & Privilege
- okalways is false and model invocation is not disabled (default). Allowing autonomous invocation is normal for skills and is not combined with broad privileges here, so no extra concern.
