Back to skill
Skillv0.1.0
ClawScan security
parallel-processing · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 14, 2026, 11:33 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only recipe for using joblib to parallelize Python workloads and its requirements and instructions are consistent with that purpose.
- Guidance
- This is a safe, coherent how-to for using joblib. Before using it: ensure the runtime Python environment has joblib installed and compatible versions of your dependencies; be cautious with n_jobs (using all cores can make the host unresponsive); watch memory usage when sharing large data objects across workers; test with small workloads first. If you run user-provided or untrusted 'expensive_computation' code, run it in a sandboxed environment to avoid executing unsafe code.
Review Dimensions
- Purpose & Capability
- okName and description claim joblib-based parallel processing; the SKILL.md contains only joblib usage examples and related tips — no unrelated credentials, binaries, or surprising access are requested.
- Instruction Scope
- okInstructions are limited to Python code examples (Parallel, delayed, parameter grid, shared data) and performance advice. They do not reference reading arbitrary host files, environment variables, network endpoints, or other system credentials.
- Install Mechanism
- okThere is no install spec (instruction-only), so nothing is downloaded or written to disk by the skill itself — consistent with a code snippet / how-to skill.
- Credentials
- okNo environment variables, credentials, or config paths are requested. This is proportional for a library usage guide; the only implicit requirement is that joblib (and any user code like expensive_computation) be available in the runtime Python environment.
- Persistence & Privilege
- okSkill is not forced-always and does not request any persistent agent privileges or modifications to other skills; autonomous invocation is allowed by default but not combined with other risky behaviors here.