Back to skill
Skillv1.0.0
ClawScan security
09 Finance Settlement · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMay 1, 2026, 2:43 PM
- Verdict
- Benign
- Confidence
- medium
- Model
- gpt-5.5
- Summary
- The provided artifacts describe a text-only finance and settlement guidance skill with no code, install steps, credentials, external access, persistence, or unsafe agent actions shown.
- Guidance
- This appears safe from an agentic-security perspective based on the provided artifacts. Because the skill gives finance and tax-related guidance, users should still verify any business, settlement, or compliance decisions with qualified finance/legal professionals before relying on it operationally.
Review Dimensions
- Purpose & Capability
- okThe visible SKILL.md content is coherent with the stated community group-buying finance/settlement purpose: profitability formulas, commission settlement, supplier settlement, funds-flow management, tax compliance, and forecasting guidance.
- Instruction Scope
- okThe content appears to be knowledge, templates, and calculation methodology; it does not show directives for autonomous tool use, account changes, data mutation, or overriding user intent.
- Install Mechanism
- okThe registry states this is an instruction-only skill with no install spec, no code files, and no required binaries.
- Credentials
- okNo environment variables, credentials, config paths, OS restrictions, network/API dependencies, or local data access requirements are declared.
- Persistence & Privilege
- okNo persistence, background operation, local indexing, credential/profile access, or privilege escalation is evidenced; the only additional listed file is empty.