Skillv1.0.0

ClawScan security

C Suite Coach Video · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 8, 2026, 12:58 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only marketing/content skill (video script templates and guidance) that requests no credentials, installs nothing, and stays within its stated purpose.
Guidance: This skill appears to do what it says (provide video types, messaging and script templates). Before using, avoid pasting sensitive client PII or proprietary metrics into prompts, obtain consent before including real client testimonials or financial figures, and review generated ROI/claims for accuracy (LLMs can hallucinate numbers). If you later extend the skill to send emails, call APIs, or access files, re-evaluate credentials and network risks. Otherwise it is coherent and low-risk.

Purpose & Capability: okThe name/description match the content: SKILL.md contains B2B video types, messaging guidance, and script templates for c-suite coach / L&D providers. There are no unrelated requirements (no cloud creds, no system binaries).
Instruction Scope: okThe runtime instructions are prose templates and marketing guidance. They do not instruct the agent to run shell commands, read local files, access environment variables, or transmit data to external endpoints. The content is focused on generating video scripts and messaging.
Install Mechanism: okNo install spec and no code files — instruction-only. This is the lowest-risk install mechanism (nothing is written to disk or downloaded).
Credentials: okThe skill declares no required environment variables, credentials, or config paths. There is no disproportionate request for secrets or unrelated service access.
Persistence & Privilege: okalways is false and the skill does not request elevated or persistent privileges. It may be invoked autonomously by the agent (platform default), which is appropriate for an instruction-only content skill.