Back to skill
Skillv1.0.1
ClawScan security
VC 大师指南 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 13, 2026, 8:04 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only learning guide for Visual Components 5.0 and its requested/installed resources match that purpose — no unusual credentials, installs, or hidden behavior were found.
- Guidance
- This skill appears to be a straightforward learning guide and is internally consistent. Before installing or using it: (1) prefer running example scripts inside your Visual Components environment (do not run arbitrary Python snippets outside that context), (2) verify official links on your side if you need the latest docs or downloads, and (3) if the skill later adds install steps or requests credentials, stop and re-evaluate — that would be unexpected for a learning-only guide. Also consider the author/source trustworthiness if you plan to rely on the material for production work.
Review Dimensions
- Purpose & Capability
- okName and description claim a Visual Components learning guide; the SKILL.md and README contain tutorials, code examples, official doc links and practical exercises consistent with that purpose.
- Instruction Scope
- okRuntime instructions are educational (examples, steps, exercises). They reference official documentation and forum posts only; they do not instruct the agent to read unrelated files, access secrets, call unknown endpoints, or exfiltrate data.
- Install Mechanism
- okNo install spec and no code files to write or execute — instruction-only content means nothing is downloaded or installed by the skill itself.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths; examples reference Visual Components API objects (vcCore) which are appropriate for in-application scripting.
- Persistence & Privilege
- okalways is false and the skill does not request persistent/system-wide privileges or modify other skills; autonomous invocation (default) is normal for skills and not a special concern here.