Skillv1.0.0

ClawScan security

Focus Break Reminder · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 3, 2026, 1:19 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This instruction-only reminder skill is internally consistent with its stated purpose: it needs no credentials, no installs, and only asks to persist minimal per-user timestamps to a small JSON file for restart survival.
Guidance: This skill appears coherent and low-risk: it only needs to store simple timestamps and settings and doesn't ask for credentials or external access. Before installing, confirm where the JSON state file will be stored and ensure the location and file permissions meet your privacy policies. Decide whether you want the agent to run reminders autonomously (platform default) or only when explicitly invoked, and verify reminder templates and quiet-hour defaults match your users' expectations. If you need stronger guarantees, run the skill in a sandboxed environment and verify it only writes the minimal fields documented in SKILL.md.

Purpose & Capability: okName and description match the instructions: a local, per-user/session break reminder. It requests no unrelated binaries, credentials, or external services.
Instruction Scope: noteInstructions stay within scope (track timestamps, evaluate eligibility, deliver templates, provide commands). They require persisting minimal state to a JSON file and integrating with inbound message handling and a heartbeat, but do not instruct reading unrelated files, environment variables, or contacting external endpoints. The storage path for the JSON is unspecified — this is expected for an instruction-only skill but the operator should confirm where files will be written and with what permissions.
Install Mechanism: okNo install spec or code is included (instruction-only), so nothing is downloaded or written by an installer. This is low-risk from an install perspective.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. The requested data (timestamps, counters, simple settings) is minimal and proportionate to the stated functionality.
Persistence & Privilege: noteThe skill persists a small JSON state file (normal for this use). It does not set always:true and does not request elevated privileges. Be aware the platform default allows autonomous invocation; if you do not want the agent to run reminders without explicit user action, adjust invocation permissions in the platform.