Skillv1.0.0

ClawScan security

Lotus Wisdom · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 15, 2026, 3:38 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only contemplative dialogue framework that asks the agent to present one step and pause; it requests no credentials, installs, or unusual permissions and is internally coherent with its stated purpose.
Guidance: This skill is an instruction-only contemplative framework and appears coherent and low-risk: it asks the model to present one step and pause, and it does not request credentials or install anything. Before relying on it for sensitive personal or legal matters, remember that conversation content persists per platform policy and model responses are not a substitute for professional advice. Also test the skill once to confirm the agent actually pauses between steps (some agent implementations might ignore the 'stop' instruction); if you want stronger guarantees, manually require explicit user confirmation before continuing rather than relying solely on the skill text.

Purpose & Capability: okThe name and description (contemplative, stepwise problem solving) match the SKILL.md and REFERENCE.md content. There are no unrelated requirements (no env vars, binaries, or installs) that would be disproportionate to a dialogue framework.
Instruction Scope: okSKILL.md explicitly instructs the agent to present a single contemplative step and stop, waiting for an explicit user prompt to continue. It does not ask the agent to read files, access system state, send data to external endpoints, or gather unrelated context. The discipline to 'stop' is unambiguous and within the skill's purpose.
Install Mechanism: okNo install spec and no code files beyond documentation. Being instruction-only means nothing is written to disk and there is no download or third-party package installation risk.
Credentials: okThe skill requires no environment variables, credentials, or config paths. There is no apparent need for secrets or external service access based on the documented behavior.
Persistence & Privilege: okalways is false and the skill does not request persistent system-wide changes. It permits normal model invocation (the platform default), which is appropriate for an interactive dialogue skill.