Skillv1.0.0

ClawScan security

Patagonia Inc · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 3:10 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only informational skill about Patagonia; its declared purpose, runtime instructions, and requested capabilities are coherent and proportionate (no credentials, installs, or risky actions).
Guidance: This skill is an informational, instruction-only document about Patagonia and appears safe to install: it requests no credentials, no installs, and contains only content the name and description imply. Two practical notes before installing: (1) the skill metadata lists an unknown source/homepage — if provenance matters to you, prefer skills from known publishers or request a homepage for verification; (2) content accuracy and currency depend on the SKILL.md text (it was published 2026-04-29), so verify any critical facts against authoritative sources. Autonomous invocation is platform-default and not a concern here because the skill has no external access or secrets.

Purpose & Capability: okThe skill name/description (Patagonia, CSR, 'Don't Buy This Jacket' ad, etc.) matches the SKILL.md content. It requests no binaries, env vars, or config paths that would be unrelated to an informational brand briefing.
Instruction Scope: okSKILL.md contains only reading/response guidance and a factual write-up (timeline, business model, facts). It does not instruct the agent to read files, access environment variables, call external endpoints, or transmit data beyond normal agent responses.
Install Mechanism: okNo install spec and no code files; nothing is written to disk or fetched at install time. This is the lowest-risk install profile.
Credentials: okThe skill declares no required environment variables, credentials, or sensitive config. There are no disproportionate secrets or access requests.
Persistence & Privilege: okalways is false and model invocation is allowed (platform default). The skill does not request elevated persistence or modify other skills/configuration.