Skillv1.0.0

ClawScan security

Etihad Airways · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 8:04 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only skill that contains a static company profile of Etihad Airways and requests no credentials, binaries, or installs — its declared purpose matches its contents.
Guidance: This skill is a read-only, instruction-only profile of Etihad Airways and appears coherent with its description. There are no installs or credential requests, so technical risk is low. Consider these non-security points before installing: (1) source is listed as "unknown" — verify the publisher if you need trustworthy or up-to-date data; (2) the document is static and may become outdated (finance, fleet, and route numbers can change); (3) if you expect live lookups (flight status, bookings), this skill does not provide APIs or credentials for that — you'd need a different skill that legitimately requires airline or travel-service credentials.

Purpose & Capability: okName/description (Etihad Airways company profile) match the SKILL.md content (company history, business model, data points). The skill does not request unrelated capabilities or credentials.
Instruction Scope: okSKILL.md is a static informational document (in Chinese) with 'read_when' triggers describing contexts where the content is relevant. It does not instruct the agent to read local files, access environment variables, call external endpoints, or perform operations outside the stated purpose.
Install Mechanism: okNo install spec and no code files are present, so nothing will be written to disk or installed at runtime.
Credentials: okNo environment variables, credentials, or config paths are required or referenced. There is no disproportionate request for secrets or external service access.
Persistence & Privilege: okalways is false and the skill is user-invocable with normal autonomous invocation allowed. That default is expected for an informational skill and does not introduce extra privileges.