Back to skill
Skillv1.0.0
ClawScan security
angular-expert · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 29, 2026, 12:49 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only Angular expertise guide whose requirements and instructions align with its stated purpose and do not request unrelated credentials, installs, or system access.
- Guidance
- This skill is a collection of Angular 17+ best practices and code examples and appears internally consistent. Because the source and owner are unknown, review the example code before copying it into production (check any API endpoint usage, authentication, and error handling). Installing this skill does not add binaries or request credentials, but if you paste its code into your project, verify that environment variables (like environment.apiUrl) and network endpoints are correct and secure. If you need provenance assurance, ask the publisher for a homepage or repository and confirm licensing and maintenance status before relying on it in enterprise projects.
Review Dimensions
- Purpose & Capability
- okThe name/description describe an Angular 17+ expert and the SKILL.md plus references/examples.md contain Angular code samples and best-practice guidance consistent with that purpose. No unrelated binaries, credentials, or config paths are requested.
- Instruction Scope
- okThe instructions are limited to coding guidance, best practices, and output format rules for Angular solutions. They do not instruct the agent to read system files, access environment variables, or transmit data to external endpoints outside normal app examples.
- Install Mechanism
- okNo install spec or code files that would be written to disk are present — this is instruction-only, which is the lowest-risk install profile.
- Credentials
- okThe skill does not require any environment variables or credentials. Some example code references typical app-level items (e.g., environment.apiUrl and relative '/api/...' calls), which are normal in sample Angular code and are not requests for host credentials.
- Persistence & Privilege
- okThe skill is not marked always:true and does not request persistent or elevated privileges. It will not auto-enable itself or modify other skills' configs.