Back to skill
Skillv1.0.0
ClawScan security
data-storytelling · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 25, 2026, 3:44 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only 'data storytelling' guide whose requirements and instructions are consistent with its stated purpose and do not request credentials or install code.
- Guidance
- This skill is a content/template guide and appears coherent. Before installing or allowing autonomous runs: (1) confirm whether your agent will execute the example Python — if so, ensure matplotlib/pandas are installed and that any data passed into those examples is safe and approved; (2) note the SKILL.md ends mid-code (truncated) — review the full content to ensure nothing omitted; (3) because the skill can be invoked autonomously by default, restrict or review any automated runs if you don't want the agent to produce or run code without human oversight.
Review Dimensions
- Purpose & Capability
- okName/description (data storytelling, presentations, visualization) match the SKILL.md content. The skill declares no binaries, env vars, or installs, which is appropriate for a prose/template-style guidance skill.
- Instruction Scope
- noteSKILL.md provides narrative frameworks, slide/visualization patterns, and example plotting code (matplotlib/pandas). The examples reference variables like dates/revenue/launch_date but are illustrative and do not instruct the agent to read system files, secrets, or external endpoints. The file is truncated near the end (example code incomplete); if the agent will execute code, confirm the runtime has required libraries and that only user-approved data is used.
- Install Mechanism
- okNo install specification and no code files — lowest-risk category (instruction-only). Nothing will be written to disk by the skill itself.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. Nothing disproportionate is being asked relative to the stated purpose.
- Persistence & Privilege
- okalways is false (default); the skill does not request persistent/system-level privileges or modify other skills. Autonomous invocation remains platform-default and is not by itself a concern here.