Back to skill
Skillv1.0.0
ClawScan security
Mumbai City · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 28, 2026, 10:06 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, informational skill about Mumbai whose requested resources and runtime instructions are consistent with its stated purpose and do not ask for credentials or install anything.
- Guidance
- This skill is low-risk: it's a read-only informational document about Mumbai and does not request credentials or install software. Before relying on it for studies or decisions, verify key facts (GDP, population, dates) against primary sources because the content can be out-of-date or truncated. If you need automated data access (APIs, live statistics, or datasets), prefer a skill that explicitly documents required credentials and data sources.
Review Dimensions
- Purpose & Capability
- okThe name and description (Mumbai geography, economy, film industry, urbanization) match the SKILL.md content and declared 'read_when' contexts; nothing in the metadata asks for unrelated resources.
- Instruction Scope
- okSKILL.md is static, encyclopedic content and scoped reading triggers for research contexts. It contains no commands, no references to file paths or environment variables, and does not instruct the agent to collect or transmit user/system data.
- Install Mechanism
- okNo install spec or code files are present — this is instruction-only, so nothing is downloaded or written to disk by the skill itself.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths; the content does not reference any secrets or external API keys.
- Persistence & Privilege
- okalways is false (no forced inclusion). The skill does not request persistent or elevated privileges, nor does it modify other skills or system settings.