Skillv1.0.0

ClawScan security

Consciousness and Human Influence · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 13, 2026, 12:19 PM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's declared purpose (behavior analysis and design using psychological and spiritual frameworks) matches its instructions and it asks for no installs, credentials, or system access; the primary concern is ethical — influence and psychological inference can be misused or produce harmful recommendations if not applied carefully.
Guidance: This skill appears coherent and technically low-risk, but it performs psychological inference and designs influence strategies — consider ethics and consent before using it to influence other people. Ask the skill (or its author) how it: 1) handles sensitive personal or health information; 2) logs or stores conversation data; and 3) avoids offering clinical diagnoses or medical/mental-health treatment. If you plan to use its output to influence groups or employees, require human review of recommendations and limit autonomous use until you’re confident in the quality and ethics of the guidance.

Review Dimensions

Purpose & Capability: okThe name and description describe behavior analysis and behavior-design work; the SKILL.md contains workflows and design steps that directly implement that purpose. There are no unrelated environment variables, binaries, or config paths requested that would be disproportionate to this stated function.
Instruction Scope: noteInstructions tell the agent to infer beliefs, motives, emotional states and to design influence strategies. This is coherent with the stated purpose, but it is ethically sensitive: inferring internal mental states and designing persuasion can cause harm if used without consent or clinical care. The document does instruct making inferences explicit as hypotheses, which mitigates some risk. There are no instructions to read local files, environment variables, or to transmit data to external endpoints.
Install Mechanism: okThis is an instruction-only skill with no install spec and no code files, so nothing is written to disk or downloaded during install. That minimizes technical installation risk.
Credentials: okThe skill requires no environment variables, credentials, or config paths. The capabilities described do not depend on external secrets or cloud credentials, so the lack of requested secrets is proportionate.
Persistence & Privilege: okalways is false and there are no requests to modify other skills or system-wide settings. The skill is user-invocable and can be triggered autonomously by the agent (the platform default), which is expected for a skill of this type.