Back to skill
Skillv1.0.0
ClawScan security
Creator Market Digest · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 21, 2026, 1:50 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only synthesizer for creator-market signals and its declared requirements and runtime instructions are coherent with that purpose.
- Guidance
- This is an instruction-only summarization tool and does not request credentials or install code. Before using it, avoid pasting sensitive secrets or credentials into the inputs (screenshots or notes) because the skill will synthesize whatever you provide. If you need strictly source-verified, real-time platform data, this skill is not intended for that — use direct API integrations instead.
Review Dimensions
- Purpose & Capability
- okName, description, and SKILL.md all describe synthesizing user-supplied creator-market observations into a concise digest. The skill requests no binaries, env vars, or config that would be unrelated to that purpose.
- Instruction Scope
- okRuntime instructions operate on inputs the user provides (observations, links, screenshots, headlines) and describe clustering and summarization steps. The SKILL.md does not instruct reading system files, environment variables, or transmitting data to external endpoints.
- Install Mechanism
- okThere is no install spec and no code files. Being instruction-only means nothing is written to disk or downloaded during install.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. That is proportionate to a summarization/synthesis skill that operates on user-provided inputs.
- Persistence & Privilege
- okalways is false and the skill does not request persistent presence or system-wide configuration changes. Autonomous invocation defaults are normal and not combined with other concerning privileges.