Back to skill
Skillv1.0.0
ClawScan security
Claw Smart Context · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 21, 2026, 8:18 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only skill that gives the agent guidelines for token- and cost-efficient behavior; its requirements and instructions are coherent with that purpose and it requests no credentials or installs.
- Guidance
- This skill is coherent and low-risk: it only contains behavioral guidance to make the agent more token-efficient and requests no secrets or installs. Before enabling broadly, test it in a safe session to confirm the agent's implementation of the guidance (e.g., use of shell commands or skipping verification) doesn't inadvertently read or modify files you care about. If you host sensitive data, consider restricting the agent's file/command permissions or disabling autonomous invocation for a trial period.
Review Dimensions
- Purpose & Capability
- okThe name/description (token- and cost-efficiency) matches the SKILL.md guidance. There are no unrelated env vars, binaries, or install steps requested — everything asked for is proportional to a behavior-guidance skill.
- Instruction Scope
- noteInstructions stay on-topic (response sizing, context loading, batching, delegation). They recommend using command-line patterns (e.g., grep) and batching tool calls to save tokens — this is a legitimate optimization but implicitly encourages using available tooling that can access files or run commands. The SKILL.md does not instruct the agent to read unrelated files or exfiltrate data.
- Install Mechanism
- okNo install spec and no code files (instruction-only), so nothing is written to disk or downloaded. This is the lowest-risk install profile.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. There is no disproportionate access requested.
- Persistence & Privilege
- okalways is false and the skill does not request elevated persistence or to modify other skills. The default ability for autonomous invocation remains, which is normal for skills.