Skillv0.1.0

ClawScan security

Wol Sleep Pc · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 11, 2026, 7:49 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is internally consistent with its stated purpose (send WOL / SOL packets); it only reads a local config and sends UDP broadcasts and does not request unrelated credentials or external endpoints.
Guidance: This skill appears to do only what it claims: send WOL/SOL UDP broadcasts using a MAC, inverted-MAC (if you provide it), and a broadcast address. Before installing, verify you are comfortable with the agent being able to run these scripts (they send UDP broadcasts from the host) and keep the config file (~/.config/wol-sleep-pc/config.json) private—do not commit it to a public repo. Also ensure you run the scripts from a machine on the same LAN or configure the correct broadcast address. If you need the agent to compute an inverted MAC automatically, note the scripts currently expect you to provide the inverted MAC (sleep_mac) rather than deriving it for you.

Purpose & Capability: okName/description match the included scripts and config. The files and README only implement sending WOL and SOL packets to a specified broadcast address and MAC; nothing else is requested or present.
Instruction Scope: okSKILL.md instructs executing the provided scripts and reading a local config (~/.config/wol-sleep-pc/config.json). The runtime instructions do not ask the agent to read other system files, environment variables, or transmit data to external services.
Install Mechanism: okInstruction-only skill with small Python scripts and no install spec. No downloads or extract steps; risk from install mechanism is minimal.
Credentials: okThe skill requires no environment variables or external credentials. It reads a single local config file (in the user's home dir) which is appropriate for this functionality.
Persistence & Privilege: okalways is false, the skill does not modify other skills or system-wide settings, and does not request permanent elevated privileges.