Skillv1.0.0

ClawScan security

Unitedhealth · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 18, 2026, 5:59 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This instruction-only skill is internally consistent with its stated purpose (providing background and recent news about UnitedHealth) and requests no credentials or installs.
Guidance: This skill appears coherent and low-risk: it only provides guidance on topics to cover about UnitedHealth and requests no credentials or installs. Before installing, consider whether the agent will need internet/browsing access to fetch 'recent news' (granting browsing changes the agent's capabilities), and instruct the agent to cite sources or prefer official/authoritative outlets when reporting facts. If you require provenance or a specific publication date cutoff, add that requirement when invoking the skill.

Purpose & Capability: okName and description match the SKILL.md: the skill asks the agent to produce background, core services, global presence, and recent news about UnitedHealth. No extraneous permissions, binaries, or credentials are requested.
Instruction Scope: okSKILL.md contains high-level, scoped instructions (topics to cover) and triggers only when the user asks about UnitedHealth. It does not instruct the agent to read local files, access unrelated env vars, or exfiltrate data. Note: 'recent news' implies web access, but that is a reasonable requirement for the stated purpose and is not encoded here.
Install Mechanism: okNo install spec and no code files. Instruction-only skills have minimal disk footprint and lower risk.
Credentials: okNo environment variables, credentials, or config paths are requested. The level of access requested is proportional to the skill's function.
Persistence & Privilege: okalways is false and the skill does not request persistent or elevated privileges. Autonomous invocation is allowed by default but not combined with other risky factors here.