Back to skill
Skillv1.0.0

ClawScan security

Reykjavik · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 29, 2026, 11:05 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This is an instruction-only, read-only reference card about Reykjavík; it requires no installs, credentials, or special privileges and its requirements match its stated purpose.
Guidance
This skill is a static informational card about Reykjavík (Chinese language). It does not request credentials, run installs, or access system files, so it is low-risk to install. Consider that factual numbers (population, GDP, tourist counts) may be out of date or approximate — verify critical statistics against authoritative sources if you need them for decisions. If you require dynamic data (live stats, APIs, maps), prefer a skill that explicitly lists those integrations and the credentials it needs.

Review Dimensions

Purpose & Capability
okName/description (city reference card about Reykjavík) aligns with the content and there are no unexpected requirements (no env vars, binaries, or installs).
Instruction Scope
okSKILL.md contains only static guidance and factual content and read_when triggers; it does not instruct the agent to read files, access credentials, call external endpoints, or perform unrelated actions.
Install Mechanism
okNo install spec and no code files — nothing will be written to disk or fetched at install time.
Credentials
okNo environment variables, credentials, or config paths are requested; scope of access is minimal and appropriate for a reference skill.
Persistence & Privilege
okalways is false and the skill does not request persistent or elevated privileges; normal autonomous invocation is allowed but not excessive given the skill content.