Skillv1.0.0

ClawScan security

Build Market Research FAQ Page · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 22, 2026, 10:23 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is an instruction-only FAQ content generator whose declared requirements and runtime instructions align with its stated purpose and request no unexpected credentials or installs.
Guidance: This skill appears coherent and low-risk: it only provides writing instructions and calls chat/web_search as expected. Before publishing outputs, verify factual claims and cited sources (LLMs can hallucinate). Avoid pasting proprietary or sensitive data into prompts unless you trust how web_search/chat interactions are handled by your platform. If you need the skill to access private data or external APIs, expect that additional credentials or install steps would be required and reassess at that time.

Purpose & Capability: okName, description, and listed capabilities (chat, web_search) align with producing market-research FAQ content. There are no unrelated required binaries, env vars, or config paths.
Instruction Scope: okSKILL.md contains a scoped workflow for drafting and refining FAQ content and explicitly uses chat and web_search. It does not instruct the agent to read local files, access unrelated credentials, or transmit data to unexpected endpoints.
Install Mechanism: okNo install spec or code files are present (instruction-only), so nothing will be written to disk or fetched during install. This is the lowest-risk pattern for skills.
Credentials: okThe skill requires no environment variables, secrets, or config paths. Requested capabilities are proportionate to generating FAQ content and performing web searches.
Persistence & Privilege: okalways is false and the skill is user-invocable; autonomous invocation is allowed (platform default) but not combined with elevated privileges or broad credential access.