Skillv1.0.0

ClawScan security

Portland Oregon · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 5:20 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is a purely informational, instruction-only skill about Portland, Oregon; it requests no credentials, performs no installs, and its instructions stay within the stated purpose.
Guidance: This skill is an informational reference about Portland and appears coherent and low-risk: it asks for no credentials and installs nothing. Before relying on specific numbers or policy descriptions for decisions, verify time-sensitive facts (population, GDP, homelessness estimates, transit miles) against authoritative sources since SKILL.md content may be static and dated. If you need the agent to perform network actions, access files, or use credentials, prefer skills that explicitly declare those needs and explain why.

Purpose & Capability: okThe skill name and description match the SKILL.md content (city history, economy, culture). It does not request unrelated binaries, env vars, or config paths — nothing appears excessive for an informational city guide.
Instruction Scope: okSKILL.md contains static content and a small set of 'read_when' triggers for relevant user queries. It does not instruct the agent to read files, access credentials, call external endpoints, or gather system data beyond the user's query context.
Install Mechanism: okNo install specification and no code files are present. Being instruction-only means nothing will be written to disk or installed by the skill itself.
Credentials: okThe skill declares no environment variables, credentials, or config paths. There are no disproportionate secret or system-access requests.
Persistence & Privilege: okFlags are default (not always), user-invocable, and allow model invocation (normal). The skill does not request permanent presence or modify other skills or system settings.