Back to skill
Skillv1.1.0
ClawScan security
Moegirl Wiki - ACG Encyclopedia · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 7, 2026, 8:05 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's requirements and runtime instructions align with its stated purpose (searching and summarizing Moegirl Wiki pages) and do not request unrelated privileges or installs.
- Guidance
- This skill is coherent and limited to fetching and summarizing public Moegirl Wiki pages. Before installing, confirm you're comfortable with the skill making outbound HTTP requests to zh.moegirl.org.cn and that its summaries will be licensed under CC BY-NC-SA (attribution required, non-commercial, share-alike). If you need stricter privacy, avoid skills that fetch remote webpages. Finally, the skill includes a promotional footer linking to Moepad on the same domain—this is expected but something to note if you prefer no promotional content in responses.
Review Dimensions
- Purpose & Capability
- okName/description match the SKILL.md: all required actions are MediaWiki API calls to zh.moegirl.org.cn and limited parsing of returned content. There are no unexpected credentials, binaries, or installs asked for.
- Instruction Scope
- okRuntime steps are narrowly scoped: search via opensearch/fulltext, fetch intro extract, optionally parse limited infobox fields, format a short summary, include attribution and a footer, and respect a 5-call limit. The instructions explicitly forbid reproducing full articles or infobox datasets and require attribution per the site's llms.txt policy.
- Install Mechanism
- okInstruction-only skill with no install spec and no code files — lowest-risk deployment model. Uses curl/WebFetch for network calls, which is expected for a web-searching skill.
- Credentials
- okNo environment variables, credentials, or config paths are requested. Network access to the public Moegirl API is required and declared via allowed-tools; this is proportionate to the stated purpose.
- Persistence & Privilege
- okSkill is not forced-always and does not request extra privileges or modify other skills or system config. Autonomous invocation is allowed (default) but not combined with any other concerning privileges.