Skillv1.0.1

ClawScan security

S2S Forecasting Expert (FuXi, FengWu, AIFS) · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 16, 2026, 7:22 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This instruction-only skill is internally consistent with its stated purpose: it generates local PyTorch scaffolds for S2S forecasting and does not request credentials, install software, or call external endpoints.
Guidance: This skill appears coherent and low-risk, but exercise normal caution: review any generated code before running it (look for dataset download commands, remote URLs, or hard-coded credentials), run unknown training scripts in a controlled environment (container/VM) if possible, verify you comply with dataset licenses such as ERA5, and disable the skill if you do not want it to be auto-invoked for related queries. If you plan to run distributed or multi-GPU scripts, inspect scheduler/launcher commands to avoid unintentionally interacting with cluster resources or credentials.

Purpose & Capability: okThe name and description (S2S model builder for FuXi/FengWu/AIFS-style systems) match the SKILL.md content: generation of model architectures, training loops, CRPS implementations, evaluation, and inference code. No unrelated capabilities or credentials are requested.
Instruction Scope: okSKILL.md is an instruction-only manifest that directs the agent to generate code and scaffolds. It does not instruct the agent to read arbitrary host files, access environment variables, or send data externally; it explicitly states no external API calls or automatic dataset downloads.
Install Mechanism: okThere is no install spec and no code files executed by the platform. Being instruction-only means nothing is downloaded or written by the skill itself—lowest-risk install posture.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. This is proportional to an LLM-based code-generator that produces local training/inference code.
Persistence & Privilege: okalways is false and the skill does not request persistent or system-wide configuration changes. Autonomous invocation is allowed by default but is not combined with other high-risk behaviors.