Skillv1.0.0

ClawScan security

Olympic Committee · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 16, 2026, 5:38 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only informational skill about a brand; it requests no credentials, no installs, and its behavior matches its description.
Guidance: This skill appears internally consistent and low-risk: it only provides branded informational content and requires no credentials or installs. Before installing, consider these practical checks: verify the skill author's identity or provenance (the registry metadata has no homepage and the source is unknown), be cautious about factual accuracy (ask the skill for sources or confirm important facts against official sites), and remember that autonomous invocation is allowed by default — if you prefer manual control, restrict usage accordingly. If the brand name is legally sensitive (e.g., Olympic/IOC), confirm the content is appropriately sourced and not infringing.

Purpose & Capability: okThe name and description (brand background, products, market analysis) align with the SKILL.md instructions; nothing requested is unrelated to delivering informational content.
Instruction Scope: okSKILL.md contains only safe, scope-limited instructions for when to read and present brand information; it does not ask the agent to read files, access environment variables, or transmit data externally.
Install Mechanism: okNo install spec or code files are present (instruction-only), so nothing is written to disk or downloaded during install.
Credentials: okThe skill declares no environment variables, credentials, or config paths — proportional for a read-only informational skill.
Persistence & Privilege: okalways is false and the skill does not request persistent system presence or elevated privileges; model invocation is enabled (normal default) but that is not combined with any broad access here.