Back to skill
Skillv1.0.0
ClawScan security
Cat · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 6, 2026, 3:32 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only, local-memory cat-care helper that only reads/writes files under ~/cat/ (with user approval) and otherwise stays within its stated purpose.
- Guidance
- This skill is internally consistent and appears to do only cat-care tasks using local files. Before installing: (1) Confirm you are comfortable with the skill creating and storing files in ~/cat/ (it asks for permission before doing so and sets restrictive permissions). (2) Note the source is 'unknown' in the metadata; if provenance matters, verify the publisher or homepage. (3) The skill does not request credentials or external endpoints, but if you enable autonomous invocation the agent may load local memory automatically — disable autonomous use if you prefer manual activation. (4) If you stop using the skill, remove or inspect ~/cat/ to erase any stored personal/pet data. If you want greater privacy, consider encrypting or backing up that folder externally before use.
Review Dimensions
- Purpose & Capability
- okName/description match the requested artifacts: the skill manages cat care and declares a local memory directory (~/cat/). No unrelated credentials, binaries, or services are requested.
- Instruction Scope
- okSKILL.md and supporting docs only direct the agent to gather cat-related context, run local setup (mkdir/touch/chmod) with explicit user permission, and consult local template files. There are no instructions to read other system files, harvest credentials, or call external endpoints.
- Install Mechanism
- okNo install spec and no code files — instruction-only. Nothing will be downloaded or executed on install, minimizing risk.
- Credentials
- okRequires no environment variables, no network credentials, and only asks to create a single per-user directory for local memory, which is proportional to the stated purpose.
- Persistence & Privilege
- noteThe skill stores persistent local memory under ~/cat/ and suggests creating files there (setup asks for user permission first and sets chmod 700). always:false and normal autonomous invocation are used; consider whether you want the agent to be able to load this memory autonomously in future sessions.