Back to skill
Skillv1.0.0

ClawScan security

今日新番列表 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 30, 2026, 6:45 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill is an instruction-only helper for finding and formatting Japan anime airing schedules; its requirements and instructions match its stated purpose and it does not request extra credentials or install code.
Guidance
This skill is coherent and safe-looking: it only provides instructions for web research and formatting and asks for no secrets or installs. Before enabling, confirm that your agent environment permits web browsing (the skill relies on live web sources) and that you are comfortable the agent will fetch and display source links. If you want to restrict network access or logging, consider enabling the skill only when browsing is allowed or reviewing the agent's browsing logs after use. If you need the skill to access authenticated streaming services, note it does not request credentials — you would need to supply them separately (which is not recommended unless absolutely necessary).

Review Dimensions

Purpose & Capability
okName/description (今日新番列表) match the SKILL.md: it searches current sources for anime airing information and outputs a Chinese table. There are no unrelated binaries, env vars, or config paths requested.
Instruction Scope
noteInstructions require the agent to browse current authoritative web sources, prefer Japanese queries, normalize times/episode numbers, and include source links — all consistent with the purpose. This does mean the agent must have network/browsing capability; the SKILL.md does not instruct reading local files or accessing unrelated secrets (which is good).
Install Mechanism
okNo install spec and no code files (instruction-only), so nothing is written to disk or downloaded. This is the lowest-risk install model and appropriate for the skill's design.
Credentials
okThe skill requests no environment variables, credentials, or config paths. That is proportionate to an information-retrieval and formatting skill.
Persistence & Privilege
okalways is false. The agent policy allows implicit invocation (allow_implicit_invocation: true) which is normal for skills that should be callable; there are no privileged persistence requests or modifications to other skills.