Back to skill
Skillv1.0.0
ClawScan security
Lamborghini Auto · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 23, 2026, 8:08 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is a read-only, instruction-only content pack about Lamborghini; its declared requirements and runtime instructions match its stated purpose and it makes no unexpected requests.
- Guidance
- This skill appears coherent and low-risk: it only provides prewritten content about Lamborghini and asks for no credentials or installs. Before installing consider: (1) the skill's source is unknown — factual claims may be outdated or imprecise, so verify important data against authoritative sources; (2) content may be copyrighted or summarized — avoid treating it as a primary source for citations; (3) even though autonomous invocation is allowed by default, this skill has no external side effects. Install if you only need a static, read-only reference; if you need real-time sales figures or the latest model specs, use an up-to-date data source or official APIs.
Review Dimensions
- Purpose & Capability
- okThe name/description promise detailed history and business insight about Lamborghini and the SKILL.md contains exactly that content. There are no unrelated required binaries, environment variables, or config paths.
- Instruction Scope
- okSKILL.md is purely informational (history, analysis, data points, 'read_when' triggers). It does not instruct the agent to read local files, access environment variables, call external endpoints, or perform system actions beyond returning content.
- Install Mechanism
- okNo install spec and no code files — this is instruction-only, so nothing is written to disk or downloaded during install.
- Credentials
- okThe skill declares no environment variables, credentials, or config paths. No secrets or unrelated credentials are requested.
- Persistence & Privilege
- okalways:false and user-invocable:true (defaults). The skill does not request permanent presence or attempt to modify other skills or system settings.