Skillv1.0.0

ClawScan security

UK Landlord Compliance Docs · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 8, 2026, 9:46 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requested resources and runtime instructions are consistent with a document/template generator for English landlord compliance and do not ask for unrelated credentials, installs, or system access.
Guidance: This skill appears internally consistent for generating English landlord documents, but consider the following before installing: (1) provenance — the source/homepage is missing, so you cannot verify the author or update cadence; (2) legal risk — outputs are templates, not legal advice; always have a solicitor review notices before serving and confirm commencement/commonly changing statutory dates; (3) privacy — do not paste unnecessary tenant-sensitive personal data into prompts unless you trust where prompts are stored/processed; (4) jurisdiction — it explicitly applies to England only (not Wales/Scotland/Northern Ireland); and (5) test on non-critical examples first to confirm the formatting and particulars match your local court/prescribed forms.

Purpose & Capability: noteThe name/description (generate UK landlord documents for England) aligns with the provided SKILL.md, README, and listing: the skill is instruction-only and produces legal templates and checklists. No binaries, credentials, or config paths are requested — which is proportionate for a template generator. Note: the package/source/homepage are not provided (owner ID present but no provenance link), so trust in authorship/maintenance cannot be independently verified.
Instruction Scope: okThe SKILL.md contains detailed, bounded instructions about generating notices, tenancy agreements, checklists and cites legislation. It does not instruct the agent to read system files, access environment variables, install software, or transmit data to external/unexpected endpoints. It also includes an explicit disclaimer to verify with a solicitor and to confirm commencement dates.
Install Mechanism: okNo install spec and no code files — this is an instruction-only skill. That minimizes disk writes and arbitrary code execution risk.
Credentials: okThe skill declares no environment variables, credentials, or config paths. That is proportionate to its stated purpose (generating templates). There are no unexpected secret requests.
Persistence & Privilege: okalways is false and model invocation is not disabled (default). This is normal for user-invocable skills. The skill does not request broad persistent privileges or system-wide configuration changes.