Back to skill
Skillv1.0.0
ClawScan security
Dji Drones · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 28, 2026, 7:07 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is a read-only, instruction-only briefing about DJI (company history, products, market position) that requests no credentials, installs, or system access and is internally consistent with its description.
- Guidance
- This skill appears low-risk and purely informational. Before installing, consider: (1) provenance — the source/homepage is unknown, so verify facts from primary sources if you need them for critical decisions; (2) currency — the briefing may become outdated (check publication date); (3) language — content is in Chinese, so ensure translations if needed. There are no credentials, installs, or system accesses requested, so there are no immediate security privileges to worry about.
Review Dimensions
- Purpose & Capability
- okThe skill's name and description advertise an informational briefing about DJI and the SKILL.md contains only that content and 'read_when' triggers; nothing requested (env, binaries, or config) is outside that purpose.
- Instruction Scope
- okSKILL.md is a static company/industry briefing and only tells the agent when to present this information; it does not instruct the agent to read user files, access credentials, call external endpoints, or collect system data.
- Install Mechanism
- okNo install spec and no code files — instruction-only skills have minimal surface area and this one does not write or download anything.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths; there is no disproportionate access requested for the stated informational purpose.
- Persistence & Privilege
- okalways is false and the skill is user-invocable; it does not request persistent presence or modification of other agent/system settings.