Back to skill
Skillv1.0.0
ClawScan security
Roblox Corp · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 4:10 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, informational skill about Roblox; it requests no credentials, installs nothing, and its instructions stay within the stated purpose.
- Guidance
- This skill is informational only and doesn't ask for credentials or install code, so it presents low technical risk. However, the source/homepage is unknown — the content is a static snapshot and could be outdated or contain inaccuracies. If you need active Roblox integrations (APIs, DevEx, or account actions), prefer a skill that explicitly declares the required API credentials and a trustworthy source. It's safe to enable for read-only, conversational use, but treat any factual claims as needing independent verification.
Review Dimensions
- Purpose & Capability
- okThe name/description promise an informational overview of Roblox; the SKILL.md contains history, business model, metrics and triggers for when to show the content. There are no unrelated requirements (no binaries, env vars, or config paths), so requested capabilities align with the stated purpose.
- Instruction Scope
- okSKILL.md is a static content/information doc with 'read_when' triggers and no runtime commands, file reads, network endpoints, or instructions to collect or transmit user data. It does not request or direct access to system resources beyond presenting text.
- Install Mechanism
- okThere is no install spec and no code files (instruction-only). This is the lowest-risk pattern: nothing is downloaded or written to disk by the skill metadata.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. No sensitive values are requested or implied.
- Persistence & Privilege
- okalways is false and the skill is user-invocable. disable-model-invocation is false (normal) but the skill has no actions that would benefit from autonomous invocation; it does not modify other skills or system settings.