Back to skill
Skillv1.1.0

ClawScan security

vacheron-constantin · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 29, 2026, 12:06 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This is an instruction-only research/writeup skill about the Vacheron Constantin watch brand that requests no credentials, does not install software, and its inputs/outputs are consistent with its stated purpose.
Guidance
This skill is a read-only content/information skill about Vacheron Constantin and appears internally consistent. Before installing: (1) understand it asks for no credentials or installs nothing, so technical risk is low; (2) outputs may reflect marketing or summary inaccuracies—verify important facts (prices, auction records, production numbers) against primary sources; (3) if you do not want the agent to call skills autonomously, disable autonomous invocation at the agent level (the skill itself does not demand autonomous access).

Review Dimensions

Purpose & Capability
okThe name and description claim a research/brand-analysis skill about Vacheron Constantin; the SKILL.md contains only brand history, market positioning, and research prompts. There are no unrelated resource requests (no env vars, binaries, or config paths) that would be disproportionate to the stated purpose.
Instruction Scope
okThe SKILL.md is limited to guidance for researching and discussing the brand and market positioning (read_when contexts and content summary). It does not instruct the agent to read local files, access credentials, contact external endpoints, or perform actions beyond producing analysis/content.
Install Mechanism
okNo install spec or code files are present; this is instruction-only so nothing will be written to disk or installed. This is the lowest-risk install profile.
Credentials
okThe skill declares no required environment variables, credentials, or config paths. There are no environment or credential demands that would be disproportionate to a research/writeup skill.
Persistence & Privilege
okalways is false and the skill does not request persistent system privileges or attempt to modify other skills or system settings. It will not be force-included in every agent run.