Skillv1.0.0

ClawScan security

Growth Mindset And Deliberate Practice · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 17, 2026, 8:55 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only coaching skill whose requirements and runtime instructions are coherent with its stated purpose and do not request unrelated credentials or installs.
Guidance: This skill is instruction-only and coherent with its stated purpose. Before installing, verify what platform tools TodoWrite, Read, and Grep are allowed to access: TodoWrite will record steps (expected), while Read/Grep — if granted — may access conversation history or files. Do not grant file or system-level access unless you want the skill to analyze local documents. No external downloads or credentials are required, but always review the tool permissions and privacy settings on your agent platform before enabling the skill.

Purpose & Capability: okName and description (growth mindset + deliberate practice) match the SKILL.md content and reference materials; required tools and no env/config requirements are proportionate to a coaching/diagnostic skill.
Instruction Scope: noteRuntime instructions focus on extracting domain and difficulty-response signals from the user, classifying mindset, and producing a practice plan. The skill asks the agent to 'scan' available context (conversation history/past performance descriptions) which is appropriate for a coaching skill, but you should confirm what the platform 'Environment' and optional tools (Read, Grep) can access before granting them.
Install Mechanism: okNo install spec and no code files — instruction-only — so nothing is downloaded or written to disk by the skill itself.
Credentials: okNo required environment variables, credentials, or config paths are declared. The optional tools could read local context or files if permitted, but the skill does not request unrelated secrets or cloud credentials.
Persistence & Privilege: okalways is false and there is no indication the skill modifies system-wide settings or other skills. It requires TodoWrite (a task-tracking tool) to record steps, which is reasonable for the stated workflow.