Back to skill
Skillv1.0.0
ClawScan security
Transfer Skill To Windows · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 14, 2026, 4:28 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only skill whose declared purpose (making agent skills Windows-compatible) matches its requested actions and has no unusual install or credential requirements.
- Guidance
- This skill is coherent and appears to do what it claims, but be cautious about what path you give it. Before running it: (1) point it only at the specific skill folder or zip you want converted — do not give root or broad home directories; (2) make a backup or use a separate output folder (the skill defaults to creating a _windows_ready sibling); (3) review diffs of any changes, especially files that might contain credentials or machine-specific settings; and (4) if you want to limit scope, explicitly ask the agent to avoid touching certain files or directories.
Review Dimensions
- Purpose & Capability
- okThe name, description, and SKILL.md are coherent: the instructions focus on inspecting a skill folder or zip and producing a Windows-ready copy. There are no unrelated environment variables, binaries, or installs requested.
- Instruction Scope
- noteThe runtime instructions direct the agent to read, inspect, and modify files inside the provided skill folder or extracted zip (SKILL.md, scripts, package manifests, templates, etc.) and to produce a converted folder/zip. This behavior is appropriate for the stated purpose, but it means the agent will read and write arbitrary files under the given input path—so users should avoid pointing the skill at broad/system directories or any paths containing secrets and should back up the source before conversion.
- Install Mechanism
- okThere is no install spec and no code files; this is instruction-only, so nothing is written to disk by an installer and no external packages are fetched.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The SKILL.md does not request additional secrets; it only inspects files provided by the user, which is proportionate to the conversion task.
- Persistence & Privilege
- okThe skill is not always-enabled and does not request modifications to other skills or agent-wide settings. It will read/write files in the user-supplied input/output locations as part of its function, which is expected for this kind of utility.