Skillv1.0.0

ClawScan security

Rolex Sa · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 25, 2026, 10:14 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is a purely informational, instruction-only skill about Rolex with no installs, no required credentials, and its runtime instructions stay within the stated topic.
Guidance: This skill is content-only and low-risk because it doesn't access your system or require credentials. Two practical cautions before use: (1) provenance — the owner and homepage are unknown, so treat factual claims (revenue, production numbers, resale percentages) as unverified estimates and ask the agent to cite sources before trusting them; (2) scope — don't rely on this skill for legal, financial, or investment decisions without independent verification. If you need higher assurance, request that the skill include source citations or come from a named, verifiable author/homepage.

Purpose & Capability: okThe skill name, description, and SKILL.md all focus on Rolex history, governance, manufacturing and second‑hand market analysis. It does not request unrelated capabilities (no env vars, binaries, or config paths).
Instruction Scope: okSKILL.md contains only topical content and reading guidance (research contexts). It does not instruct the agent to access local files, environment variables, external endpoints, or other system resources.
Install Mechanism: okNo install spec and no code files are present (instruction-only), so nothing is written to disk or fetched at install time.
Credentials: okThe skill requires no credentials or environment variables; requested privileges are minimal and proportional to an informational skill.
Persistence & Privilege: okalways is false and the skill is user-invocable. Autonomous invocation is allowed (platform default) but not combined with other red flags; the skill does not request persistent system presence or modify other skills.