Back to skill
Skillv1.0.0
ClawScan security
Hello World · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 17, 2026, 7:56 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is a simple, instruction-only greeting skill whose requirements and instructions are consistent with its stated purpose.
- Guidance
- This skill is low-risk: it only instructs the agent to generate greetings and to include the current date/time and an emoji. If you care about timezone formatting or language detection, verify the agent's locale/timezone behavior; otherwise it's safe to install. No credentials or downloads are required.
Review Dimensions
- Purpose & Capability
- okThe name/description match the runtime instructions: producing a localized, personalized greeting with date/time and an emoji. No unrelated credentials, binaries, or config paths are requested.
- Instruction Scope
- okSKILL.md only instructs the agent to produce greetings, include current date/time, an emoji, and personalize when a name is provided. These actions are within scope; the only external data implied is the system clock and the user's language inferred from the user input.
- Install Mechanism
- okNo install spec and no code files — instruction-only. Nothing is written to disk or downloaded during install.
- Credentials
- okNo environment variables, credentials, or config paths are requested. The skill does not ask for elevated access or unrelated secrets.
- Persistence & Privilege
- okalways is false and the skill does not request persistent presence or modify system/agent-wide settings. Normal autonomous invocation is allowed but not required by the skill's behavior.
