Skillv1.0.1

ClawScan security

Time Magazine · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 23, 2026, 9:26 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only skill that contains descriptive and historical content about TIME magazine and does not request credentials, install software, or instruct the agent to access unrelated system resources — its declared purpose matches its runtime content.
Guidance: This skill appears to be a read-only informational description of TIME magazine and is internally consistent with that purpose. It does not ask for credentials or install code and therefore has a low security footprint. Consider the following before installing: (1) content may be copyrighted — avoid using it in ways that violate licensing; (2) if a future version adds installs, env vars, or remote endpoints, re-evaluate for coherence and risk; (3) because the agent can invoke skills autonomously by default, only enable it in agents you trust to use editorial content appropriately.

Purpose & Capability: okThe skill's name and description match the SKILL.md content (history, business model, brand analysis of TIME). There are no unrelated requirements (no env vars, binaries, or installs) that would be disproportionate to a content/encyclopedic skill.
Instruction Scope: okSKILL.md is purely informational (frontmatter + article-style content and read_when hints). It does not instruct the agent to read local files, environment variables, or send data to external endpoints, nor does it grant broad discretionary data collection.
Install Mechanism: okNo install spec and no code files are present. Being instruction-only, nothing will be written to disk or downloaded at install time.
Credentials: okThe skill requires no environment variables, credentials, or config paths. There are no requests for secrets or unrelated service tokens.
Persistence & Privilege: okThe skill is not marked always:true and is user-invocable. disable-model-invocation is false (normal platform default). There is no evidence it attempts to modify other skills or system-wide settings.