Back to skill
Skillv1.0.0
ClawScan security
Paramount Pictures · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 26, 2026, 12:04 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- Instruction-only content about Paramount Pictures with no installs, credentials, or filesystem access; the skill is internally consistent with its stated purpose.
- Guidance
- This skill is content-only and appears low-risk from a security perspective. Before installing, consider: (1) provenance — there is no homepage or source linked, so verify the publisher if provenance matters; (2) factual accuracy and freshness — key numbers (subscribers, market cap, acquisitions) are unsigned and may be outdated or approximate, so cross-check with authoritative, up-to-date sources for important decisions; (3) autonomous invocation is allowed by default on the platform, but this skill does not request credentials or system access. If you require provenance or up-to-date data, prefer skills with a verifiable homepage/source or ones that declare live-data integrations.
Review Dimensions
- Purpose & Capability
- okThe name and description (historical and business analysis of Paramount Pictures) match the SKILL.md content. No extra binaries, env vars, or unrelated capabilities are requested.
- Instruction Scope
- okSKILL.md is a content/information response template (timeline, business model, analysis, data). It contains 'read_when' triggers for relevant user intents but does not instruct the agent to read local files, access environment variables, call external endpoints, or exfiltrate data.
- Install Mechanism
- okNo install spec and no code files — nothing is written to disk or installed. This is the lowest-risk install posture.
- Credentials
- okNo environment variables, credentials, or config paths are required. Nothing requests access to unrelated services or secrets.
- Persistence & Privilege
- okalways is false and the skill is user-invocable; autonomous model invocation is allowed by default on the platform but the skill itself does not request elevated persistence or modify other skill settings.