Back to skill
Skillv1.0.0
ClawScan security
One Championship · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 16, 2026, 5:38 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only informational pack about ONE Championship (history, rules, fighters, schedule) and requests no installs, credentials, or special privileges — its declared purpose matches its content.
- Guidance
- This skill appears coherent and low-risk: it only provides static information about ONE Championship and asks for no credentials or installs. If you need live results or authenticated features (ticketing, personalized alerts), expect a different skill that would require network access or API keys — review such requirements carefully. Also keep in mind the SKILL.md content is static; verify any critical facts (schedules, broadcast rights) against official sources if you rely on them.
Review Dimensions
- Purpose & Capability
- okName/description promise (rules, history, fighters, schedule) matches the SKILL.md content; nothing in the package asks for unrelated access or capabilities.
- Instruction Scope
- okSKILL.md contains only static informational text and a short read_when list; it does not instruct the agent to read files, access environment variables, call external endpoints, or perform unrelated actions.
- Install Mechanism
- okNo install spec and no code files are present (instruction-only), so nothing is written to disk or installed.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths — proportional for a read-only informational skill.
- Persistence & Privilege
- okalways is false and no special persistence or system-wide config changes are requested; autonomous invocation is allowed (platform default) but the skill has no elevated privileges.