Skillv1.0.0

ClawScan security

Rolls Royce Plc · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 22, 2026, 7:24 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only, information/reference skill about Rolls‑Royce Holdings plc whose declared requirements and runtime instructions are consistent with its stated purpose.
Guidance: This skill is informational and internally consistent, but treat its facts as unverified: the SKILL.md includes many numeric claims (revenues, market share, project timelines) without citations. Before using this for investment, operational or safety decisions, cross-check figures and dates against authoritative sources (company filings, press releases, trusted industry analysts). Because it asks for no credentials and makes no external calls, it does not pose direct credential-exfiltration risk, but do not rely solely on it for critical decisions.

Purpose & Capability: okThe skill name, description and SKILL.md content all describe company background, timeline and business analysis. It requests no binaries, env vars, or config paths that would be unrelated to an informational/reference skill.
Instruction Scope: okSKILL.md contains static reference material and a small 'read_when' list of when the agent should consult it. It does not instruct the agent to read local files, access credentials, call external endpoints, or perform actions outside informational use.
Install Mechanism: okNo install spec or code files are present; this is instruction-only, so nothing is written to disk or installed at runtime.
Credentials: okNo environment variables, credentials, or config paths are requested. The skill does not ask for any secrets or elevated access.
Persistence & Privilege: okalways is false and model invocation is allowed (the platform default). The skill does not request persistent system presence or modify other skills or system settings.