Back to skill
Skillv1.0.0
ClawScan security
Databricks Analytics · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 9:06 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, read-only informational skill about Databricks with no installs, no required credentials, and no runtime actions — its declared purpose matches its content.
- Guidance
- This skill appears to be a harmless informational reference about Databricks. Before installing, note: (1) it does not integrate with Databricks or require credentials — if a future version asks for API keys or cloud credentials, treat that as a significant change and re-evaluate; (2) because it is instruction-only there is no code to audit, but also no network or execution behavior is declared; (3) verify the publisher/source if you need provenance or accuracy guarantees (the listing lists no homepage). If you need programmatic Databricks access, prefer a skill that explicitly documents the required API scopes and uses official endpoints.
Review Dimensions
- Purpose & Capability
- okThe skill's name and description claim to provide information about Databricks and the SKILL.md is precisely that: background, timelines, business analysis and use cases. There are no unrelated requirements (no binaries, env vars, or config paths).
- Instruction Scope
- okSKILL.md contains static, informational text and 'read_when' guidance. It does not instruct the agent to run commands, read files, access environment variables, or transmit data to external endpoints.
- Install Mechanism
- okNo install spec and no code files are present, so nothing is written to disk or executed during installation.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths — consistent with an informational/reference skill.
- Persistence & Privilege
- okalways is false and the skill is user-invocable. Model invocation is allowed (the platform default) but this is reasonable given the skill is read-only and requests no privileged access.