Back to skill
Skillv1.0.0
ClawScan security
flutter-architecture · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 4, 2026, 1:02 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only Flutter MVVM + componentization architecture and scaffolding guideline that only describes creating directories under lib/ and contains no unrelated requirements or external installs.
- Guidance
- This skill appears coherent and instruction-only, but be aware it will create directories/files under your project's lib/ when you ask it to scaffold. Before using: (1) run it from the intended project root or a safe test repo, (2) back up or use version control so you can review/revert generated changes, and (3) inspect the generated files to ensure naming/ dependency rules match your team's conventions. No credentials or network access are requested by the skill.
Review Dimensions
- Purpose & Capability
- okThe name and description match the content: both SKILL.md and references/architecture.md document a Flutter MVVM + componentized project structure and describe scaffolding. There are no declared env vars, binaries, or unrelated requirements that don't belong to this purpose.
- Instruction Scope
- okRuntime instructions are limited to creating the described directory/file structure under lib/ (scaffold or new module) and to following the included reference doc. The instructions do not ask the agent to read unrelated system files, access credentials, or contact external endpoints.
- Install Mechanism
- okThere is no install spec and no code files to write or execute beyond the agent following textual instructions — this is the lowest-risk pattern for a skill of this type.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. The requested scope (creating project folders/files) is proportional to the stated functionality.
- Persistence & Privilege
- okalways:false and no install means the skill does not request permanent presence or elevated platform privileges. It will create files in the project when invoked, which is expected for a scaffolding guideline.