Skillv1.0.0

ClawScan security

market-research · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 21, 2026, 8:38 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This instruction-only market-research skill is internally consistent with its stated purpose and does not request extra credentials, installs, or unusual system access.
Guidance: This skill is an instruction-only helper for market research and appears to be coherent and low-risk: it needs no credentials, no installs, and only uses chat and web search capabilities. Before publishing or acting on its outputs, review and validate the research (web_search results can be incomplete or stale). If you plan to let an agent run this autonomously, remember the agent may perform searches and generate outward-facing content—ensure you have review steps for any external publication or decisions based on its output.

Purpose & Capability: okThe name, description, and workflow all describe market research tasks (sizing, segmentation, competitor mapping, pricing, demand validation). There are no unrelated requirements (no env vars, binaries, or installs) that would be disproportionate to the stated purpose.
Instruction Scope: okSKILL.md contains a focused workflow and high-level instructions. It references platform capabilities (chat, web_search) that are appropriate for research. It does not instruct the agent to read local files, access credentials, or transmit data to unexpected external endpoints.
Install Mechanism: okNo install spec or code files are present (instruction-only), so nothing is written to disk or downloaded during install.
Credentials: okThe skill requires no environment variables, credentials, or config paths. No sensitive access is requested or implied.
Persistence & Privilege: okDefaults are used (always: false, model invocation allowed). The skill does not request persistent/system-wide privileges or modify other skills' configurations.