Skillv1.0.0

ClawScan security

Cb Social Channel Matrix · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 25, 2026, 3:47 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This skill is an instruction-only decision framework for international social media channel strategy and its requested/installed resources align with that purpose.
Guidance: This skill is a purely instructional framework and does not access your system or require credentials. Before relying on its recommendations: (1) verify platform availability, policy, and ad/compliance rules for each target market (local legal review if needed); (2) validate recommendations with local language or market experts; (3) do not paste sensitive credentials or proprietary customer data into prompts; and (4) treat the output as strategic guidance to be tested (30–60–90 day experiments) rather than a turnkey implementation plan.

Purpose & Capability: okThe name and description match the actual content: a strategy/framework for selecting and operating social channels overseas. The skill requests no binaries, credentials, installs, or access beyond the guidance it contains, which is proportionate to this purpose.
Instruction Scope: okSKILL.md contains only procedural guidance (inputs to collect, workflow, output modules, example prompts, safety notes). It does not instruct the agent to read local files, environment variables, or send data to external endpoints, nor does it grant broad discretionary data collection.
Install Mechanism: okNo install spec or code files are present. As an instruction-only skill, nothing is written to disk and there are no download/install risks.
Credentials: okNo environment variables, credentials, or config paths are requested. The guidance asks for business inputs (markets, objectives, team size) but does not require sensitive secrets.
Persistence & Privilege: okalways is false (default) and the skill does not request persistent system privileges or modifications to other skills. Autonomous invocation remains possible (platform default) but is not combined with other privileged behaviors.