Back to skill
Skillv1.0.0
ClawScan security
unsuck-your-thinking · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 17, 2026, 1:17 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only conversational helper whose requirements and runtime instructions match its stated purpose and request no external credentials or installs.
- Guidance
- This skill is instruction-only and internally consistent: it only guides how the agent asks follow-up questions and forms a conclusion. Before installing, consider that (1) the skill will encourage the agent to elicit personal or sensitive details from users — avoid sharing sensitive credentials/medical/legal details in chat; (2) advice produced is conversational, not professional — don’t rely on it for legal/medical/financial decisions; and (3) the agent may invoke the skill automatically per platform settings (normal behavior) — if you do not want automatic activation on vague inputs, review agent invocation/eligibility controls before enabling the skill.
Review Dimensions
- Purpose & Capability
- okName/description (help a confused user by asking layered questions and giving a clear stance) match the SKILL.md: no unrelated binaries, env vars, or capabilities are requested.
- Instruction Scope
- okRuntime instructions only describe conversation techniques (ask one specific question, probe deeper layers, give a conclusion). They do not reference files, env vars, network endpoints, or system state beyond normal chat context.
- Install Mechanism
- okNo install spec and no code files — nothing is written to disk or fetched during install.
- Credentials
- okSkill declares no required environment variables, credentials, or config paths; the SKILL.md does not request any secrets.
- Persistence & Privilege
- okalways:false and no special privileges requested. Agent invocation is allowed (platform default) but nothing here grants elevated or persistent system access.