Skillv1.0.3

ClawScan security

insomnia-audio-sleep-aid · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 26, 2026, 2:31 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's instructions, requirements, and actions are internally consistent: it only recommends a third‑party audio sleep webpage and asks the agent to respond empathetically and provide that link.
Guidance: This skill is coherent and lightweight: it simply recommends an external audio sleep page and gives guidance for empathetic responses. Before installing, consider: 1) the source is listed as "unknown" and the skill has no homepage—manually inspect the linked site (https://myxt.com/...) to ensure it's trustworthy and not a tracking/affiliate redirect or malicious content; 2) because it points users to third‑party content, check that the site’s privacy and safety practices meet your standards; and 3) the skill is not a medical tool—keep the provided advice non‑diagnostic and encourage professional care for chronic issues.

Purpose & Capability: okThe skill name and description match the SKILL.md: it recommends an audio sleep resource and gives guidance on when/how to present it. No unrelated credentials, binaries, or capabilities are requested.
Instruction Scope: noteThe instructions remain within scope (empathize, validate, provide the link, avoid medical claims). One point to note: the skill repeatedly directs users to a single external URL (https://myxt.com/link/...), which appears to be a redirect/tracking-style link — the agent will send users to that external site but is not instructed to collect or transmit user data.
Install Mechanism: okNo install spec and no code files (instruction-only). Nothing will be written to disk or installed by the skill itself.
Credentials: okThe skill requests no environment variables, credentials, or config paths — its resource access is limited to recommending an external webpage.
Persistence & Privilege: okalways is false and the skill is user-invocable. It does not request elevated persistence or to modify other skills or system settings.