Back to skill
Skillv0.7.0

ClawScan security

Chat share · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 15, 2026, 3:01 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This is a minimal, instruction-only alias that simply tells users to use /clawpage; it requests no credentials, installs, or system access and is internally consistent with its description.
Guidance
This skill is just a pointer telling users to use the newer /clawpage command — it does not perform actions, request credentials, or install software. You can safely ignore or remove this alias and install /clawpage directly if you want the canonical behavior. If you plan to follow the provided installation link, verify the linked project (https://github.com/imyelo/clawpage) yourself before entering any credentials or running installers.

Review Dimensions

Purpose & Capability
okName and description state it's a legacy alias for /clawpage; SKILL.md only redirects users to the canonical command and an installation URL. There are no unrelated requirements.
Instruction Scope
okRuntime instructions are limited to advising the user to use /clawpage and pointing to an external install page. The instructions do not read files, env vars, or transmit data.
Install Mechanism
okNo install spec and no code files — nothing is downloaded or written to disk by the skill itself.
Credentials
okThe skill declares no required environment variables, credentials, or config paths; SKILL.md does not reference any hidden secrets.
Persistence & Privilege
okSkill is not marked always:true and does not request persistent or elevated access. Autonomous invocation remains allowed by platform default but poses no additional risk given the skill's minimal scope.