Back to skill
Skillv1.0.0
ClawScan security
SwiftUI macOS · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 1:47 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only SwiftUI-for-macOS guidance skill whose declared purpose, included reference files, and runtime instructions are internally consistent and do not request unrelated credentials, installs, or external endpoints.
- Guidance
- This skill appears coherent and low-risk: it only contains documentation and runtime guidance for macOS SwiftUI and asks no credentials or installs. Before using it, be aware that when you ask it to review or modify your project it will need access to your project files — grant that access only in trusted environments. If you run the agent in a restricted environment (no filesystem access or no network), verify the platform can load the packaged references; otherwise the advice may be degraded. Finally, because the skill can be invoked autonomously by the agent (the platform default), only enable it in agents you trust to access your codebase.
Review Dimensions
- Purpose & Capability
- okThe skill name and description match the provided SKILL.md and nine local reference files: it is explicitly a macOS SwiftUI guidance/review helper targeting macOS 26+/Swift 6.2. There are no unrelated environment variables, binaries, or installs required that would contradict this purpose.
- Instruction Scope
- okRuntime instructions are limited to consulting the included reference documents and applying them when asked to write or review SwiftUI macOS code. The SKILL.md does ask to 'load relevant references' (these references are packaged with the skill), and it reasonably implies the agent will read user project files when the user requests a code review — but it does not instruct reading unrelated system files, environment variables, or sending data to external endpoints.
- Install Mechanism
- okThere is no install specification and no code files to execute; this is an instruction-only skill so nothing is downloaded or written to disk during install.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. The compatibility note references filesystem access to load references, which is proportional and consistent with an instruction-only reference-based helper.
- Persistence & Privilege
- okalways is false and the skill does not request elevated or permanent presence. Normal autonomous invocation is allowed (disable-model-invocation is false) which is expected for skills of this type and is not combined with any other concerning permissions.