Back to skill
Skillv1.0.0
ClawScan security
Old Navy · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 24, 2026, 8:04 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, read-only informational skill about the Old Navy brand with no installs, no required credentials, and no commands or file access — it behaves consistently with its description.
- Guidance
- This skill appears to be a harmless informational article about Old Navy. Before installing, note the source is unknown (check the owner ID or publisher if you need an official affiliation). Because it is instruction-only and requests no credentials or installs, it poses minimal risk — but if a future version adds install steps, network calls, or environment variables, re-evaluate before enabling it.
Review Dimensions
- Purpose & Capability
- okThe skill's name and description match the SKILL.md content (brand history, business analysis). It does not request any unrelated capabilities or credentials.
- Instruction Scope
- okSKILL.md contains only a short metadata 'read_when' list and an article-style writeup. There are no runtime commands, no file paths, and no instructions to collect or transmit data to external endpoints.
- Install Mechanism
- okNo install spec and no code files are present. Being instruction-only means nothing is written to disk or fetched at install time.
- Credentials
- okThe skill declares no required environment variables, no credentials, and no config paths — proportionate for an informational skill.
- Persistence & Privilege
- okalways is false and the skill does not request persistent or elevated privileges. It does not modify other skills or system settings.