coder

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is a simple informational namespace skill that only runs a small local script to print fixed coder/Netsnek feature information.

This appears safe to install if you only need the informational coder namespace behavior. It has exec permission, but the included script simply prints fixed text and JSON; it does not perform real scaffolding or refactoring in this version.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill allows the agent to run this included script, but the script does not access files, credentials, network services, or modify the system.

Why it was flagged

The skill requests permission to execute a local script and documents invoking that script, but the reviewed script only emits fixed brand, feature, or JSON text.

Skill content
permissions:
      - exec
...
```bash
scripts/coder-info.sh
```
Recommendation

Acceptable for this purpose; users should still recognize that the skill uses local script execution.

What this means

A user may expect functional coding tools, but the artifacts show only informational output.

Why it was flagged

The description advertises developer-productivity capabilities, while the actual documented behavior is namespace reservation and informational output.

Skill content
Provides code scaffolding, snippet management, refactoring helpers, and project template generation.
...
This skill reserves the `coder` namespace on ClawHub and provides brand identity and feature information when invoked.
Recommendation

Treat this as a brand/info skill unless future versions add the advertised coding functionality.