Back to skill
Skillv1.0.0

ClawScan security

Build Legal Services FAQ Page · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 22, 2026, 10:23 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This instruction-only FAQ generator is internally consistent with its stated purpose and requests no credentials or installs, but outputs should be human-reviewed for legal accuracy and privacy before use.
Guidance
This skill appears coherent and low-risk, but consider these precautions before using it with real client matters: 1) Always have a qualified attorney or compliance reviewer verify outputs—do not treat generated content as legal advice. 2) Avoid pasting sensitive or personally identifying client data into prompts; web_search or chat calls may transmit content to external services. 3) Confirm jurisdiction-specific accuracy and cite primary sources—web_search results can be incomplete or out of date. 4) If you integrate this into automated workflows, remember the skill can be invoked by the agent (default behavior); keep human checkpoints for high-risk decisions. 5) Ensure any connected chat/web_search providers meet your privacy/compliance requirements before sending confidential material.

Review Dimensions

Purpose & Capability
okThe name/description (generate legal-services FAQ content) match the instructions: drafting FAQs, clarifying audience/goals, and using chat/web_search. No unrelated binaries, env vars, or credentials are requested.
Instruction Scope
okSKILL.md contains scoped, document-focused steps (clarify audience, draft, refine). It references chat and web_search APIs only and explicitly recommends human review; it does not instruct reading system files, environment variables, or other unrelated data sources.
Install Mechanism
okNo install spec or code files are present (instruction-only), so nothing will be written to disk or fetched at install time.
Credentials
okNo environment variables, credentials, or config paths are required. The declared APIs (chat, web_search) are proportional to producing and fact-checking FAQ content.
Persistence & Privilege
okalways is false and the skill is user-invocable; it does not request persistent system-wide privileges or claim to modify other skills' configs.