Back to skill
Skillv0.1.0

ClawScan security

Motivation Skill · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignFeb 13, 2026, 5:41 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This is a simple instruction-only skill that returns prewritten motivational quotes and does not request credentials, install software, or access system resources.
Guidance
This skill is low-risk: it contains only static instructions and a short list of quotes and does not access credentials or system resources. Things to consider before installing: (1) the registry metadata lacks a detailed description and the source/owner identity is minimal—if you require provenance, confirm the owner or review the SKILL.md content yourself; (2) verify that the included quotes and attributions meet any licensing or attribution requirements you care about; and (3) although the agent may invoke the skill autonomously (the platform default), that is reasonable here because the skill cannot access sensitive data. If you want to change behavior or add more quotes, do so locally or from a trusted author.

Review Dimensions

Purpose & Capability
okThe skill's name and SKILL.md describe a single, simple purpose (provide a motivational quote). There are no declared environment variables, binaries, or installs that would be unrelated to that purpose.
Instruction Scope
okThe runtime instructions are limited to replying with prewritten quotes when certain phrases are detected. They do not ask the agent to read files, access environment variables, call external endpoints, or perform other out-of-scope actions.
Install Mechanism
okThere is no install spec and no code files; this is instruction-only, so nothing is written to disk or downloaded at install time.
Credentials
okThe skill requests no credentials, config paths, or environment variables — appropriate for a self-contained quote responder.
Persistence & Privilege
okThe skill is not marked always:true and uses default invocation settings. It does not request elevated or persistent system privileges and does not modify other skills or system configs.