Back to skill
Skillv1.0.0
ClawScan security
Macallan · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 3:06 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is a self-contained, instruction-only informational skill about The Macallan whisky; its content, requirements, and behavior are consistent with that purpose.
- Guidance
- This skill appears to be a harmless, read-only informational guide about The Macallan. The publisher/source is unknown and the SKILL.md contains no citations — if you need authoritative or up-to-date facts (auction prices, corporate financials, production claims), verify them against primary sources (auction houses, Edrington reports, industry databases). Because it is instruction-only and requests no credentials or installs, the main remaining risk is factual inaccuracy or outdated content rather than a security/privacy issue.
Review Dimensions
- Purpose & Capability
- okThe skill name and description match the SKILL.md content (historical, production and market information about The Macallan). It declares no binaries, env vars, installs, or config paths that would be unrelated to an informational guide.
- Instruction Scope
- okThe SKILL.md is static, topical content (summary, timeline, analysis, facts). It does not instruct the agent to read local files, access credentials, or transmit data to third parties; there is no scope creep in the provided instructions.
- Install Mechanism
- okNo install spec or code files are present (instruction-only). Nothing will be downloaded or written to disk by the skill itself.
- Credentials
- okThe skill requests no environment variables, credentials, or configuration paths; there is no disproportionate access requested.
- Persistence & Privilege
- okalways is false and user-invocable; the skill does not request persistent presence or elevated privileges and does not modify other skills or system-wide settings.