Back to skill
Skillv1.0.0
ClawScan security
Skills Builder · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 5, 2026, 3:19 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only helper that guides users through creating SKILL.md files; its requirements and instructions are consistent with that purpose and it does not request extra privileges or external installs.
- Guidance
- This skill appears coherent and low-risk: it only guides the user through creating SKILL.md content and has no install or credential requests. Before installing, consider: (1) review any SKILL.md the assistant generates to ensure trigger phrases are specific (to avoid accidental activations), (2) be aware that the skill can use your conversation history to extract examples—avoid having it pull from chats containing sensitive data, and (3) verify the generated Skill does not later request credentials or external endpoints when you install or use it. If you want extra caution, inspect the generated SKILL.md and the suggested test phrases before enabling the new Skill.
Review Dimensions
- Purpose & Capability
- okThe name/description (help users create Skills) matches the SKILL.md content (a guided conversation flow and generation rules). There are no unrelated env vars, binaries, or install steps requested.
- Instruction Scope
- noteThe instructions sometimes ask to 'look back at our conversation' and to 'automatically extract rules from the chat history'—this is coherent for a Skill-building assistant but means the agent will use conversation history as input. There are no instructions to read files on disk, access external endpoints, or collect unrelated system data.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill, so nothing is downloaded or written by an installer. This minimizes install-time risk.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths; that is proportionate to its described function.
- Persistence & Privilege
- okalways is false and the skill does not request system-wide persistence or to modify other skills. Autonomous invocation is allowed by default but is not combined with broad privileges here.