Skillv1.0.1

ClawScan security

TechVideo Wizard - SuperMap GIS技术小视频脚本向导 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 29, 2026, 9:23 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's instructions, requirements, and behavior align with its stated purpose (guided video script generation with a duplicate-content web search); it requests no credentials and has no install actions.
Guidance: This skill appears coherent and low-risk for its stated purpose. Before installing or using it: - Remember duplicate-content checks use web search: any keywords you enter will be sent to search engines (avoid pasting proprietary or sensitive details). - The skill enforces fixed branding/terminology (TERM_CONSTRAINTS.md) — if you need different product names or wording, prepare to override or update those constraints. - There are no requested credentials or installs, but still review generated scripts (especially CTA wording) before publishing to avoid unintended calls-to-action or leaked info. - If your environment doesn't provide a web_search tool, the duplicate-content step may fail — test the skill with non-sensitive examples first.

Purpose & Capability: okThe name/description describe an interactive video-script wizard and the SKILL.md only asks for user-provided script inputs, structured prompts, and web searches to detect existing videos — all consistent with creating non-sensitive video scripts.
Instruction Scope: okRuntime instructions are limited to asking step-by-step questions, storing answers as context, running web_search queries for duplicate-content checks, applying formatting and terminology constraints, and generating/optimizing Markdown output. There are no instructions to read arbitrary local files, access credentials, or transmit data beyond search queries and user-provided content.
Install Mechanism: okNo install spec or code to fetch; this is instruction-only. No downloads, extract steps, or third-party packages are referenced.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. The only external interaction is web_search for public platform results, which is appropriate for a duplicate-content check.
Persistence & Privilege: okalways is false and the skill does not request persistent system presence or modify other skills. Autonomous invocation is allowed by default but not combined with broad privileges here.