Back to skill
Skillv1.0.0
ClawScan security
Dog · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 6, 2026, 3:34 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This instruction-only skill is internally consistent with its stated purpose: it manages local dog-care files under ~/dog/ with explicit user approval and requests no credentials, binaries, or external installs.
- Guidance
- This skill appears coherent and limited to local, user-approved dog-care files. Before installing: 1) confirm you are comfortable the agent can create ~/dog/ and store contact/medical notes there; 2) accept creation only after reviewing the exact mkdir/touch/chmod commands; 3) consider setting directory permissions, encrypting sensitive data, or keeping personally identifying info out of the files if you prefer; and 4) because the skill can be invoked by the agent, review activation preferences so it doesn't turn on automatically unless you want that behavior.
Review Dimensions
- Purpose & Capability
- okName/description (dog health, walks, training, travel, triage) align with the runtime instructions and file layout. The only requested resource is a local memory directory (~/dog/) which is appropriate for storing rosters, timelines, and vet/logistics notes.
- Instruction Scope
- okSKILL.md and companion files confine actions to dog-care workflows and local file reads/writes. The setup explicitly asks for permission before creating ~/dog/ and initializes from templates. Triage guidance limits risky behavior (no dosing, encourages emergency escalation). There are no instructions to read unrelated system files, access environment variables, or transmit data externally.
- Install Mechanism
- okNo install spec, no code files, and no downloads — this is low-risk (instruction-only). The only shell snippets are user-approval prompts to create local directories and set permissions (mkdir, touch, chmod), which are appropriate and minimal.
- Credentials
- okThe skill declares no required environment variables, no primary credential, and no config paths beyond ~/dog/. No secrets or unrelated service credentials are requested.
- Persistence & Privilege
- noteThe skill persists data locally under ~/dog/ when the user approves; it recommends chmod 700 for the directory. It does not request always:true or system-wide changes. Note: local storage can contain personal or sensitive contact/medical details — the skill's persistence is proportionate but the user should consider privacy/backups/encryption.