Back to skill
Skillv1.0.0
ClawScan security
Sothebys · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 12:02 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only informational skill about Sotheby's; its declared purpose, instructions, and required resources are coherent and it does not request credentials, install code, or perform unexpected actions.
- Guidance
- This skill is low-risk and appears to be an informational reference about Sotheby's. Before installing, consider: (1) verify factual claims against authoritative sources if you need high accuracy (dates, financial figures, product names), (2) confirm the content update cadence (published date is included in registry metadata), and (3) be aware that although the skill itself is harmless, any agent responses should be checked for hallucinations or outdated facts when used for decisions (e.g., valuations, legal/financial advice).
Review Dimensions
- Purpose & Capability
- okName and description match the SKILL.md content (historical and business overview of Sotheby's). No unrelated binaries, env vars, or config paths are requested.
- Instruction Scope
- okSKILL.md provides only content and 'read_when' triggers for when to present this information. It does not instruct the agent to read files, access environment variables, call external endpoints, or transmit data outside the agent's normal operation.
- Install Mechanism
- okNo install spec and no code files; nothing is written to disk or downloaded during install.
- Credentials
- okNo environment variables, credentials, or config paths are required. The skill does not request sensitive access.
- Persistence & Privilege
- okalways is false and the skill is user-invocable; it does not request elevated or persistent privileges.