Back to skill
Skillv1.0.0

ClawScan security

Ai Agents Architect · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 8, 2026, 11:31 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill's instructions, requirements, and scope align with its stated purpose (designing and implementing autonomous agents); it is an instruction-only guidance pack with no installs, secrets, or unexpected behaviors.
Guidance
This is a guidance-only skill for architecting autonomous agents and appears internally consistent. Before using: (1) verify the author/source (homepage is missing) if provenance matters for your environment; (2) review any code the skill generates before running it—do not execute code that asks for credentials or performs network calls without inspection; (3) be cautious when using produced patterns to integrate real tools (ensure tool credentials are stored securely and granted only when strictly necessary); (4) remember that even benign guidance can be used to build powerful autonomous systems—apply your own safety checks and policies when deploying agent code.

Review Dimensions

Purpose & Capability
okName/description match the content: SKILL.md contains architecture patterns, tool-integration guidance, memory and multi-agent design. The skill declares no binaries, env vars, or config paths that would be unrelated to this purpose.
Instruction Scope
okRuntime instructions are implementation patterns and code examples for building agents. They reference invoking tools via a tool registry (expected for this domain) but do not instruct reading unrelated system files, external endpoints, or harvesting environment variables.
Install Mechanism
okNo install spec and no code files beyond SKILL.md; nothing is downloaded or written to disk by the skill itself (lowest-risk installation model).
Credentials
okThe skill requests no environment variables, credentials, or config paths. This is proportional for a design/advice skill that only provides patterns and examples.
Persistence & Privilege
okFlags show always:false and default autonomous invocation allowed (normal). The skill does not request persistent system presence or modify other skills' configs.