Skillv1.1.0

ClawScan security

topgolf · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 12:06 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an informational, instruction-only skill about Topgolf; it requests no credentials, installs nothing, and its runtime instructions are limited to providing background and analysis prompts — the skill is internally coherent with its stated purpose.
Guidance: This skill is essentially a static informational brief about Topgolf and appears safe to use: it asks for nothing and doesn't install code. Two practical cautions: (1) the skill's source/homepage is unknown — if provenance matters to you, prefer skills with a verifiable author or linked sources; (2) treat factual claims (dates, financial figures) as unverified until you corroborate with primary sources. If a future version starts requesting credentials, downloads, or system access, stop and re-evaluate before proceeding.

Purpose & Capability: okThe name/description and SKILL.md are aligned: an informational briefing and analysis prompts about Topgolf. The skill requests no binaries, env vars, or config paths that would be unrelated to that purpose.
Instruction Scope: okSKILL.md contains only background, timelines, business analysis points, and 'read_when' prompts. It does not instruct the agent to read files, access environment variables, call external endpoints, or perform any actions beyond producing analysis and summaries.
Install Mechanism: okNo install spec and no code files — instruction-only. Nothing is written to disk or fetched at install time.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. That is proportionate to an informational/analysis skill.
Persistence & Privilege: okalways is false and the skill does not request persistent or elevated privileges, nor does it modify other skills or system settings.