Skillv1.0.0

ClawScan security

Haagen Dazs · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 10:04 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only, informational skill about the Häagen‑Dazs brand that requests no binaries, credentials, installs, or special privileges and its content is coherent with its stated purpose.
Guidance: This skill is internally consistent and low-risk: it's static, read-only brand content in Chinese and requires no permissions. Before using it for production or publication, verify factual claims (dates, ownership, revenue figures, legal/ownership details) against authoritative sources and ensure you have rights to reuse any trademarked material if republishing. If you need the agent to take actions (network calls, purchases, or access other services), prefer a skill that explicitly declares the minimal required credentials and install steps.

Purpose & Capability: okName, description, and SKILL.md are all informational about the Häagen‑Dazs brand; there are no unrelated resource requests (no env vars, binaries, or config paths).
Instruction Scope: okSKILL.md contains brand overview, timeline, business model, and facts to be read in relevant contexts. It does not instruct the agent to read files, call external services, or access secrets beyond the declared none.
Install Mechanism: okNo install spec and no code files — nothing is written to disk or installed. This minimizes surface area and matches the informational nature of the skill.
Credentials: okThe skill declares no required environment variables, credentials, or config paths; nothing requested is disproportionate to an informational/encyclopedic skill.
Persistence & Privilege: okalways is false and the skill does not request persistent or elevated privileges or modify other skills/configuration. Default autonomous invocation is allowed but presents minimal risk given the skill's scope.