Back to skill
Skillv1.0.0
ClawScan security
Content Headline Generator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 3, 2026, 9:55 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only headline generator whose requested resources, instructions, and outputs are consistent with its stated purpose and show no signs of unexplained privileges or data exfiltration.
- Guidance
- This skill appears coherent and safe from a system-access perspective: it only needs user input (topic, audience, platform) and generates headline suggestions. Consider privacy and content-policy cautions: avoid supplying sensitive or personally identifiable information in prompts, review generated headlines for accuracy and truthfulness (to avoid misleading or deceptive claims), and A/B test in a controlled way. If you need the skill to integrate with analytics or publishing platforms later, expect it to require explicit credentials at that time.
Review Dimensions
- Purpose & Capability
- okName/description (headline generation based on copywriting and marketing psychology) aligns with the SKILL.md content, examples, and README. No unrelated credentials, binaries, or platform access are requested.
- Instruction Scope
- okRuntime instructions are limited to asking the user for content context (topic, audience, platform), selecting headline formulas, generating variants, scoring and recommending A/B tests. The skill does not instruct reading local files, environment variables, or sending data to external endpoints.
- Install Mechanism
- okInstruction-only skill with no install spec and no code files — nothing is written to disk or fetched at install time.
- Credentials
- okNo environment variables, credentials, or config paths are required. The declared requirements are minimal and appropriate for a text-generation helper.
- Persistence & Privilege
- okalways is false and there is no request to modify other skills or system settings. disable-model-invocation is false (normal), meaning the agent can call it autonomously — appropriate for a user-invoked content-generation skill.