Back to skill
Skillv0.1.0
ClawScan security
TOSR Test Skill · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMay 1, 2026, 8:07 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5.5
- Summary
- This appears to be a harmless instruction-only test artifact with no code, install steps, credentials, or declared system access.
- Guidance
- This looks like a temporary testing artifact rather than a functional user skill. Before installing, consider whether you actually need a test-only skill in your environment, but the supplied artifacts do not show executable code, credential use, persistence, or hidden behavior.
Review Dimensions
- Purpose & Capability
- okThe stated purpose is a temporary TOSR/ClawHub lifecycle test skill, and the provided artifact only describes that purpose without adding executable behavior.
- Instruction Scope
- okThe instructions are limited to describing test lifecycle validation and do not tell the agent to perform hidden, unrelated, or unsafe actions.
- Install Mechanism
- okThere is no install spec, no code files, and no required binaries or environment variables.
- Credentials
- okThe skill requests no local files, credentials, network configuration, OS-specific access, or other environment permissions.
- Persistence & Privilege
- okNo persistence mechanism, background process, credential use, or privilege escalation is present in the supplied artifacts.
