Skillv1.0.0

ClawScan security

Cbs News · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 23, 2026, 5:07 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only informational skill about CBS News that does not request credentials, install software, or perform any suspicious actions — it is internally coherent with its stated purpose.
Guidance: This skill is low-risk: it only contains static informational text and does not ask for credentials or install software. However, the registry metadata lists no homepage or source; if you require authoritative or up-to-date reporting, verify the content against trusted sources (CBS/Paramount official pages or reputable news archives) before relying on it. If provenance matters for your use case, prefer skills with a documented source and maintainer contact.

Purpose & Capability: okThe skill's name and description match the SKILL.md content (historical and business information about CBS News). There are no extra requirements (no env vars, binaries, or config paths) that would be unrelated to an informational/news summary.
Instruction Scope: okSKILL.md contains only descriptive content and a small 'read_when' list of contexts to read about; it does not instruct the agent to access files, environment variables, external endpoints, or perform system actions. Scope stays within informing about CBS News.
Install Mechanism: okNo install spec or code files are present (instruction-only). Nothing is downloaded or written to disk by the skill itself.
Credentials: okThe skill requests no credentials, environment variables, or config paths. There are no secret-like variables required and nothing disproportionate to an informational skill.
Persistence & Privilege: okThe skill is not always-enabled and does not request elevated persistence. Model invocation is allowed (platform default), which is appropriate for a user-invocable informational skill.