Back to skill
Skillv1.0.0
ClawScan security
Gold Gym · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 24, 2026, 2:10 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only informational skill about Gold's Gym; its requested resources and runtime instructions are consistent with its stated purpose and it does not ask for credentials, installation, or system access.
- Guidance
- This skill appears internally consistent and low-risk: it only provides informational content and requests no credentials or installs. Two practical cautions: (1) source/homepage metadata are blank/unknown — verify any factual claims (store counts, revenues, dates) against authoritative sources before relying on them; (2) although the skill itself is safe, always review any skill that is later modified to include installation steps, network calls, or credential requirements before enabling it.
Review Dimensions
- Purpose & Capability
- okThe skill's name/description and SKILL.md content all describe Gold's Gym history, business model, and trivia. There are no unrelated environment or binary requirements, so requested capabilities align with the stated purpose.
- Instruction Scope
- okSKILL.md is purely informational (historical timeline, business analysis, facts) and the read_when hints only indicate appropriate contexts. It does not instruct the agent to read files, access environment variables, run commands, or send data to external endpoints.
- Install Mechanism
- okNo install spec and no code files are present (instruction-only). Nothing will be written to disk or downloaded during install, which minimizes risk.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. There are no disproportionate or unexplained secret requests.
- Persistence & Privilege
- okalways is false and the skill is user-invocable (normal). disable-model-invocation is false (agent may call it autonomously), which is typical and acceptable given the skill's low-risk, informational nature.