Back to skill
Skillv2.0.2

ClawScan security

克劳塞维茨 Skill · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 12, 2026, 2:39 AM
Verdict
Benign
Confidence
high
Model
gpt-5-mini
Summary
The skill is an instruction-only strategic-advice pack about Clausewitz-era thinking adapted to AI; its declared requirements, instructions, and lack of installs or credentials are consistent with that purpose.
Guidance
This is a text-only advisory skill with no code, installs, or credential requests, so its technical risk is low. Before enabling, consider non-technical risks: the content provides strategic/military reasoning and could be misused for harmful planning—ensure you comply with laws, ethics, and your organisation's acceptable-use policies. If provenance matters to you, prefer skills with a known author or referenced institutional backing; this skill lists sources but the registry 'Source' and 'Homepage' are unknown. If you need operational or technical execution (e.g., commanding systems, automated workflows), this skill does not provide that capability and you should not expect it to access systems or credentials.

Review Dimensions

Purpose & Capability
okName/description (strategic decision support based on Clausewitz) match the SKILL.md content. The skill declares no binaries, env vars, or installs, which is proportional for a text-based advisor.
Instruction Scope
okSKILL.md contains heuristics, mental models, examples and explicit honesty/limits. It does not instruct the agent to read files, access environment variables, call external endpoints, or perform system/network actions.
Install Mechanism
okNo install spec and no code files (instruction-only). Nothing will be written to disk or executed as part of an install step.
Credentials
okThe skill requests no environment variables, credentials, or config paths; this is proportionate to a purely instructional strategic-advice skill.
Persistence & Privilege
okalways:false and default agent invocation settings. The skill does not request permanent system presence or modify other skills' configs.