Skillv1.0.2

ClawScan security

Waimai · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 31, 2026, 10:01 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requested access and runtime instructions match its stated purpose (public takeout decision support); it requests no credentials, installs, or system files and explicitly forbids account access.
Guidance: This skill appears coherent and limited to public takeout decision advice. It does not request credentials or perform account actions, which matches its description. Before installing, remember: (1) if you later rely on account-linked features (coupon claiming, checkout automation), use a different skill designed for that and supply credentials only when necessary; (2) monitor future versions for added install steps or environment-variable requests — those would change the risk profile; (3) autonomous agent invocation is enabled by default on the platform (normal), so only enable the skill for agents you trust to act autonomously. If you need stricter guarantees, require explicit user confirmation before the agent runs the skill.

Purpose & Capability: okName and description (takeout decision support) align with the instruction content; the skill requests no env vars, binaries, or config paths that would be unrelated to that purpose.
Instruction Scope: okSKILL.md confines the agent to public decision signals and explicitly disallows logins, cookie handling, order retrieval, coupon claiming, local persistence, or browser automation. It does not instruct reading system files or unrelated environment variables.
Install Mechanism: okNo install spec and no code files — instruction-only skill. Nothing is written to disk or downloaded by the skill itself.
Credentials: okNo required environment variables, primary credential, or config paths are declared or referenced; this is proportionate for a public-information advisory skill.
Persistence & Privilege: okalways:false and no special privileges requested. The skill does not request permanent/system-wide presence or modify other skills' configs.