Back to skill
Skillv1.0.0
ClawScan security
Interview Questions · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 21, 2026, 5:31 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's files, instructions, and requirements are consistent with a local interview-question generator and do not request unrelated credentials or install external code.
- Guidance
- This skill appears to be a straightforward, local interview-question generator. Before installing/using it: (1) Run the Python script in a controlled environment (Python 3.8+). (2) Be cautious about supplying candidate resumes or any PII to the tool—store or transmit such data only under your privacy rules since the skill does not state any privacy measures. (3) Review generated questions for bias, legality, and fairness (e.g., avoid inappropriate or discriminatory questions). (4) If you plan to integrate it into an automated pipeline, verify there are no added network calls or wrappers that could change its behavior.
Review Dimensions
- Purpose & Capability
- okName/description (generate multi-round interview questions with scoring and follow-ups) match the provided assets: a question bank, SKILL.md usage instructions, and a local Python generator script. No unrelated capabilities (cloud access, system administration, or messaging integrations) are requested.
- Instruction Scope
- okSKILL.md and the included script only describe/perform local templating and text generation based on provided job title/requirements and optional resume. There are no instructions to read arbitrary system files, access network endpoints, or exfiltrate data.
- Install Mechanism
- okNo install spec is provided (instruction-only plus a local script). The only runtime requirement is Python 3.8+, which is reasonable for the included script. Nothing is downloaded or executed from external URLs.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The code similarly does not reference environment variables or secrets.
- Persistence & Privilege
- okThe skill does not request permanent presence or special privileges (always:false). It does not modify other skills or system settings; it is a self-contained generator script.