Skillv1.0.0

ClawScan security

Agent Designer Migrated · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 30, 2026, 3:21 PM

Verdict: benign
Confidence: medium
Model: gpt-5-mini
Summary: The skill is an instruction-only, migrated example with no installs, no required credentials, and no runtime steps that access unrelated files or network—however the examples reference local modules under ~/.opencode/skills which are not declared, so verify those integrations before use.
Guidance: This skill appears to be a migrated example (instruction-only) and is internally coherent for that use. Before installing or enabling it for autonomous use: 1) check whether the example modules it references (under ~/.opencode/skills or named packages like exa-search) actually exist in your environment—missing dependencies will cause runtime errors; 2) if you expect the skill to integrate with other local skills, verify those skills' source and permissions; 3) because this file is only documentation/examples, there is no code to run from the skill itself—treat it as documentation until you add or install the referenced modules. If you need higher assurance, request the skill's author/source or a full code package that declares dependencies and install steps.

Purpose & Capability: noteThe README claims a full 'agent-designer' capability and provides usage examples that require local modules (e.g., ~/.opencode/skills/subagente-optimizado, buscador_de_skills, exa-search). The skill package itself declares no dependencies, no install, and no required env vars. This mismatch looks like a migrated example referencing other local skills rather than missing or malicious requirements, but you should confirm those modules exist where you run the agent.
Instruction Scope: okSKILL.md contains only descriptive text and example code snippets. It does not instruct the agent to read arbitrary system files, exfiltrate data, or call external endpoints. There are no runtime directives beyond the examples.
Install Mechanism: okNo install spec is present (instruction-only). That is low-risk because nothing in this skill is written to disk or fetched at install time.
Credentials: okThe skill declares no required environment variables, credentials, or config paths, and the SKILL.md does not reference any secrets. Requested privileges appear proportionate (none requested).
Persistence & Privilege: okalways is false and the skill is user-invocable; it does not request permanent presence or modification of other skills or system-wide settings.