Back to skill
Skillv1.0.0
ClawScan security
New York Yankees · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 24, 2026, 10:07 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, information-style skill about the New York Yankees; its declared purpose, runtime instructions, and requested privileges are internally consistent and proportional.
- Guidance
- This is a low-risk, read-only informational skill about the New York Yankees. It doesn’t request credentials or install software. Before installing, consider that content accuracy and currency aren't guaranteed (no trusted homepage/source is listed), so verify any important facts against authoritative sources if you plan to rely on the data.
Review Dimensions
- Purpose & Capability
- okThe skill's name and description (history, business, valuations of the New York Yankees) match the SKILL.md content. It does not request unrelated capabilities, binaries, or credentials.
- Instruction Scope
- okSKILL.md is purely informational and contains read_when triggers for research topics; it does not instruct the agent to read local files, access environment variables, call external endpoints, or transmit data outside the scope of the topic.
- Install Mechanism
- okNo install specification or code files are present (instruction-only), so nothing will be written to disk or fetched at install time.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths; requested access is minimal and appropriate for an informational skill.
- Persistence & Privilege
- okalways is false and model invocation is allowed (the platform default). The skill does not request permanent presence or elevated privileges.