Back to skill
Skillv1.0.0

ClawScan security

Post-Labor Economics · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 4, 2026, 7:13 PM
Verdict
Benign
Confidence
high
Model
gpt-5-mini
Summary
The skill is an instruction-only toolkit for modeling post-labor policy that stores working files under ~/post-labor-economics/ and does not request credentials, binaries, installs, or network access — its declared behavior matches its requirements.
Guidance
This skill appears coherent and instruction-only. Before installing: (1) Confirm you are comfortable with files being created under ~/post-labor-economics/ and only grant permission when prompted; (2) Do not paste sensitive personal credentials or private data into prompts or saved memory; (3) If the skill recommends installing related skills (e.g., 'economics', 'strategy'), review those skills' requirements separately — they may request additional access or tooling; (4) If you need strict non-persistence, decline the setup persistence option so the skill runs session-only. Overall, the skill does what it says and requests no disproportionate system access.

Review Dimensions

Purpose & Capability
okName and description (post-labor economic modeling, policy portfolios, scenarios) align with the provided files and declared behavior. There are no unexpected env vars, binaries, or external services required.
Instruction Scope
okRuntime instructions are limited to structuring analysis, asking the user for context, and optionally persisting memory in ~/post-labor-economics/. The skill explicitly asks for user confirmation before writing files and states it makes no undeclared network calls or reads outside its declared path.
Install Mechanism
okNo install spec and no code files — the skill is instruction-only, so nothing is downloaded or written by an installer. This is low-risk and proportionate for a documentation/assistant skill.
Credentials
okRequires no environment variables, credentials, or config paths beyond the declared local memory directory. The skill's requested persistence (local memory) is proportional to its stated purpose.
Persistence & Privilege
okalways:false and no special privileges requested. The skill may persist local preference/memory under the user path only after explicit confirmation, which matches its functionality. Note: agent autonomous invocation is allowed by platform default but is not a specific concern here given the skill's limited scope.