Back to skill
Skillv1.0.0
ClawScan security
Cadence · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 20, 2026, 1:54 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- Instruction-only skill that provides a company profile of Cadence and requests no credentials, installs, or privileged capabilities — its declared purpose matches what it does.
- Guidance
- This skill is an instruction-only company profile: it does not request any credentials, make installs, or instruct system access, so it's internally coherent and low-risk. However, the source/homepage are unspecified and the owner ID is unknown—treat the content as informational and verify any factual or financial claims (e.g., revenue, market share, product support for specific process nodes) against official filings, Cadence press releases, or reputable industry analysis before using it for investment or technical decisions. If you later see this skill modified to include network calls, downloads, or environment variables, reassess immediately.
Review Dimensions
- Purpose & Capability
- okName/description (Cadence company profile) align with the SKILL.md content. The skill asks for nothing (no env, binaries, or paths) and only contains informational instructions appropriate for a company/industry briefing.
- Instruction Scope
- okSKILL.md is an informational document (history, business analysis, metrics) and the 'read_when' triggers are limited to queries about the company, market, or investment analysis. It does not instruct the agent to read local files, access environment variables, make external uploads to unknown endpoints, or perform unrelated system actions.
- Install Mechanism
- okNo install specification and no code files are present; nothing will be written to disk or installed. This is the lowest-risk pattern for a skill of this type.
- Credentials
- okRequires no environment variables, credentials, or config paths. There is no disproportionate secret or credential access for the stated purpose.
- Persistence & Privilege
- okFlags show default behavior (not always-enabled, agent invocation allowed). There is no request to persist settings, modify other skills, or gain elevated privileges.