Back to skill
Skillv1.0.2
ClawScan security
system-info-skill · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 4, 2026, 6:03 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code and instructions match its description: it only collects local OS/CPU/memory/disk information and does not request credentials, network access, or unusual system privileges.
- Guidance
- This skill appears coherent and low-risk: it gathers only local system information (OS, CPU, memory, disk) and does not contact external endpoints or request secrets. Before installing, you may want to: (1) review the included scripts yourself (they are short and readable), (2) run the script in a sandbox or on a test machine if you're concerned about exposing system details, and (3) confirm you obtained the skill from a trusted source — system telemetry can still be sensitive (hardware, disk sizes, OS version), so avoid installing if you do not trust the publisher.
Review Dimensions
- Purpose & Capability
- okName/description ask for basic system info and the package contains a small Python script that returns OS, CPU, memory, and disk usage — this is proportional and expected.
- Instruction Scope
- okSKILL.md instructs running the included Python script and does not direct the agent to read unrelated files, environment variables, or send data externally. The script reads standard system sources (/proc/meminfo on Linux, ctypes on Windows) and disk usage for '/', which is consistent with its purpose.
- Install Mechanism
- okNo install spec is provided (instruction-only install), so nothing is downloaded or executed beyond the shipped script. This is low-risk and proportional.
- Credentials
- okThe skill requires no environment variables, no credentials, and no config paths. The script only uses standard library modules and local system APIs to gather information.
- Persistence & Privilege
- okThe skill is not always-enabled and uses default agent invocation behavior. It does not modify other skills or request elevated persistent presence.