Back to skill
Skillv1.0.0

ClawScan security

java-optimization · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 13, 2026, 3:09 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill is an instruction-only Java performance‑optimization guide and its declared requirements and instructions are coherent with that purpose.
Guidance
This skill is essentially a curated set of Java performance best practices and code examples and appears internally consistent. Before applying changes in production: review code snippets for correctness and side effects, validate JVM flags and thread-pool sizes against your environment, install profiling tools from official sources, run changes in a staging environment, and confirm you trust the skill author since the package source/homepage is not provided.

Review Dimensions

Purpose & Capability
okName, description, capabilities and examples all align with Java performance optimization (JVM tuning, caching, concurrency, DB queries, profiling). Nothing requested or declared is unrelated to that purpose.
Instruction Scope
okSKILL.md contains guidance, code snippets and recommended tools (VisualVM, Arthas, JMH) appropriate for the stated goal. Instructions do not ask the agent to read unrelated files, access external endpoints, or exfiltrate secrets.
Install Mechanism
okNo install spec and no code files — instruction-only. No downloads, no third‑party install steps, so minimal disk/write risk.
Credentials
okThe skill declares no environment variables, credentials, or config paths. That is proportionate for a documentation/assistant skill that only gives recommendations and code examples.
Persistence & Privilege
okalways is false and the skill is user-invocable. It does not request persistent privileges or modify other skills or system-wide settings.