Back to skill
Skillv0.1.0
ClawScan security
Careers Page Generator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 4:25 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's requirements and instructions match its stated purpose (helping create/optimize careers pages); it is instruction-only, requests no credentials or installs, and its file access is limited and relevant.
- Guidance
- This skill appears coherent and low-risk. Before enabling, review any .claude/project-context.md or .cursor/project-context.md files in your workspace (the skill may read them for company context) to ensure they don't contain secrets or unrelated confidential data. Because the skill can be invoked autonomously by the agent (normal default), decide whether you want it available for automatic use; if you prefer, restrict invocation in your agent settings. Otherwise no additional credentials or installs are required.
Review Dimensions
- Purpose & Capability
- okName, description, and runtime instructions align: the skill focuses on careers-page content, structure, employer branding, and SEO. There are no unrelated environment variables, binaries, or install steps requested.
- Instruction Scope
- okSKILL.md is focused on page guidance. The only filesystem access it instructs the agent to attempt is reading .claude/project-context.md or .cursor/project-context.md for company context — which is relevant for producing targeted output. It does not instruct collecting unrelated files, env vars, or transmitting data to external endpoints.
- Install Mechanism
- okThis is an instruction-only skill with no install spec and no code files, so nothing is written to disk or downloaded during install.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths beyond optionally reading project-context files. Credential access is not requested.
- Persistence & Privilege
- okalways is false (default) and model invocation is allowed (normal). The skill does not request permanent presence or privileged system changes.
