Back to skill
Skillv1.0.0
ClawScan security
Hulu · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 10:06 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an informational, instruction-only skill about Hulu that requests no credentials, binaries, or installs and is internally consistent with its stated purpose.
- Guidance
- This skill is informational only and appears safe from a permissions/installation perspective: it doesn't request credentials, binaries, or install actions. However, the package metadata shows no homepage and an unknown source owner — that affects trust and provenance (not security). If you need active Hulu functionality (playback, account integration, billing), this skill does not provide that and you should look for an official integration which will explicitly request the necessary Hulu/Disney+ credentials. As always, avoid entering any private credentials into a skill unless it's a well-known, official provider and the required access is clearly explained.
Review Dimensions
- Purpose & Capability
- okThe skill's name and description match the SKILL.md content (a factual/history/analysis write-up about Hulu). It requests no binaries, env vars, or system access that would be inconsistent with an informational skill.
- Instruction Scope
- okSKILL.md contains research/read_when guidance and an informational article; it does not instruct the agent to read unrelated files, access credentials, send data to external endpoints, or run commands. Scope is limited to content generation and research about Hulu.
- Install Mechanism
- okNo install spec and no code files — instruction-only surface means nothing is written to disk or fetched during install.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths; this is proportionate for a read-only informational skill.
- Persistence & Privilege
- okalways is false and autonomous invocation is permitted (the platform default). The skill does not request elevated or persistent privileges or modify other skills or system-wide settings.