Back to skill
Skillv1.0.0

ClawScan security

Schedule Interpreter · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 29, 2026, 11:47 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This is an instruction-only cron-expression helper whose requirements and instructions match its stated purpose and request no credentials, installs, or system access.
Guidance
This skill is an instruction-only cron-expression helper (documentation and examples). It requests no credentials or installs and does not perform I/O, so it appears safe and coherent for its stated purpose. Keep in mind: it is purely descriptive — it will not actually schedule jobs or run commands. If you need features not covered here (seconds fields, time zones, nonstandard cron implementations, or converting natural language scheduling beyond the provided examples), look for a skill or tool that explicitly states those capabilities and lists any required binaries or API keys. Also watch for future updates that add install scripts or environment variables; those would need fresh review.

Review Dimensions

Purpose & Capability
okThe name/description (cron parsing, validation, explanation, conversion) aligns with the SKILL.md content. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
okSKILL.md contains only documentation and examples of cron formats and validation rules; it does not instruct the agent to read files, environment variables, call external endpoints, or perform unrelated system actions.
Install Mechanism
okNo install spec or code files are provided (instruction-only), so nothing is downloaded or written to disk.
Credentials
okThe skill declares no required environment variables or credentials; that is proportionate for a purely informational cron parser.
Persistence & Privilege
okalways:false and default invocation settings are used. The skill does not request persistent presence or modify agent/system settings.