Skillv0.1.1

ClawScan security

Vigil · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 12, 2026, 5:38 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's claims (an agent safety wrapper) align with what it includes and requests, but it depends on an external npm package so you should review that package's source before installing.
Guidance: This skill is internally consistent: it provides a small wrapper that calls an npm safety library to evaluate agent tool calls. Before installing or running it, review the vigil-agent-safety package and its GitHub repository (maintainers, recent commits, published code) because the runtime behavior depends entirely on that third‑party package. Pin a specific version, inspect its source code, and install in a sandboxed environment if possible. Note the registry metadata at the top of the skill listing lacked a source/homepage while SKILL.md and _meta.json reference hexitlabs — verify that the npm package and repository URLs match and are legitimate. If you cannot audit the package, avoid installing it on sensitive systems.

Purpose & Capability: okName/description match the actual contents: a small CLI wrapper and instructions that call the npm package vigil-agent-safety to evaluate agent tool calls. The dependency on an npm safety library is coherent with the stated purpose.
Instruction Scope: noteSKILL.md instructs the user to install and use the vigil-agent-safety npm package and shows example usage. The included script only parses args and forwards them to checkAction; it does not read unrelated system files or environment variables. Note: the skill requires the external package to be installed for runtime behavior—if missing the wrapper will error out.
Install Mechanism: noteNo automated install spec is provided; SKILL.md asks you to run npm install for a public npm package. Using a public npm package is a moderate supply-chain risk (expected here), so review the package and its GitHub repo before installing. The install is not via an opaque URL or archive.
Credentials: okThe skill requests no environment variables, credentials, or config paths. The wrapper and documentation do not reference secrets or unrelated credentials.
Persistence & Privilege: okalways is false and the skill is user-invocable. The skill does not request permanent presence or modify other skills' configs. It does not attempt to persist credentials or change system-wide settings.