Back to skill
Skillv1.0.0
ClawScan security
Reykjavik · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 11:05 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, read-only reference card about Reykjavík; it requires no installs, credentials, or special privileges and its requirements match its stated purpose.
- Guidance
- This skill is a static informational card about Reykjavík (Chinese language). It does not request credentials, run installs, or access system files, so it is low-risk to install. Consider that factual numbers (population, GDP, tourist counts) may be out of date or approximate — verify critical statistics against authoritative sources if you need them for decisions. If you require dynamic data (live stats, APIs, maps), prefer a skill that explicitly lists those integrations and the credentials it needs.
Review Dimensions
- Purpose & Capability
- okName/description (city reference card about Reykjavík) aligns with the content and there are no unexpected requirements (no env vars, binaries, or installs).
- Instruction Scope
- okSKILL.md contains only static guidance and factual content and read_when triggers; it does not instruct the agent to read files, access credentials, call external endpoints, or perform unrelated actions.
- Install Mechanism
- okNo install spec and no code files — nothing will be written to disk or fetched at install time.
- Credentials
- okNo environment variables, credentials, or config paths are requested; scope of access is minimal and appropriate for a reference skill.
- Persistence & Privilege
- okalways is false and the skill does not request persistent or elevated privileges; normal autonomous invocation is allowed but not excessive given the skill content.
