Back to skill
Skillv1.0.0
ClawScan security
Thần Cửu (Jaskies) · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 10:36 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's files and runtime instructions are coherent with its stated purpose (a local personality/relationship analysis using names and birthdates); it requests no credentials or installs and only stores analysis output in a local knowledge folder.
- Guidance
- This skill appears internally consistent for a local numerology/personality analysis and asks only for names and birthdates. Things to consider before installing: (1) the analysis asks you to provide exact name and birthdate from official ID — treat this as sensitive PII and avoid sending full ID numbers or extra ID images unless you trust the environment; (2) results are saved to a local knowledge/ThanCuu/ folder — ensure you are comfortable with that storage location and its retention policy; (3) one reference points to an external knowledge path (knowledge/md/ThanCuu/) — verify whether that file exists in your agent environment or whether the skill will request you to provide it; (4) there are no network endpoints, credentials, or installers declared, but because this is an instruction-only skill you should still inspect how your agent runtime handles writing/reading the knowledge folder. If you need higher privacy, avoid providing full official ID numbers and supply only the name and birthdate necessary for the analysis.
Review Dimensions
- Purpose & Capability
- okName/description (Thần Cửu personality analysis) matches the provided references and SKILL.md. No unexpected binaries, external services, or credentials are requested.
- Instruction Scope
- noteRuntime instructions ask users to provide full name and date of birth as on official ID (expected for this analysis) and state that results will be saved to knowledge/ThanCuu/. One reference (SoDuongDoi.md) points to content to be obtained from knowledge/md/ThanCuu/ which implies the skill may read from or expect additional knowledge files outside the skill bundle — this is not declared as a required config path but could be normal for agent-local knowledge storage.
- Install Mechanism
- okInstruction-only skill with no install spec and no code files; nothing is written to disk by an installer. Lowest install risk.
- Credentials
- noteNo environment variables or credentials are requested (proportionate). However, the skill explicitly asks for sensitive personal data (full name and exact birth date per official ID). That PII is required for the analysis and will be stored locally per the SKILL.md instructions.
- Persistence & Privilege
- okalways is false and the skill does not request elevated or persistent platform privileges. It instructs storing outputs under knowledge/ThanCuu/ (its own workspace area) and does not indicate modification of other skills or system-wide settings.