Skillv1.0.0

ClawScan security

Mayo Clinic · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 16, 2026, 8:02 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This instruction-only skill is internally consistent with its stated purpose (providing a brand/profile summary of 'Mayo Clinic') and does not request credentials, installs, or access beyond what it declares.
Guidance: This skill appears low-risk and aligned with its stated purpose, but note the source is 'unknown' — if you need authoritative or up-to-date clinical information, rely on official Mayo Clinic channels (their website or published materials). Because it's instruction-only, it won't install code or ask for credentials, but verify the publisher before trusting any factual claims and cross-check important details against primary sources.

Purpose & Capability: okThe name/description claim to provide brand background and market information and the SKILL.md contains only instructions to present development history, products/services, and market position. There are no unrelated env vars, binaries, or install steps requested.
Instruction Scope: okSKILL.md is limited to producing a company/brand profile and includes a short outline of topics to cover. It does not instruct reading local files, accessing credentials, or transmitting data to external endpoints. It does suggest using official channels for authoritative info.
Install Mechanism: okNo install spec, no code files, and no downloads — lowest-risk instruction-only skill.
Credentials: okThe skill requires no environment variables, credentials, or config paths; requested access is proportional (none) to the stated functionality.
Persistence & Privilege: okalways is false and the skill is user-invocable only. It does not request permanent presence or modification of other skills or system settings.