Skillv1.0.0

ClawScan security

Math Foundation · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 16, 2026, 9:17 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This skill is an instruction-only, read-only math knowledge outline and its declared requirements match its content — nothing requested or installed appears disproportionate or suspicious.
Guidance: This appears to be a safe, self-contained knowledge-base skill (no code, no installs, no credentials). It is essentially a curated list of math topics and milestones — useful for reference but not a procedural tool. Consider that the skill has no listed source or homepage, so if you need authoritative or up-to-date proofs or implementations (e.g., for cryptography or financial models), verify details against trusted references. If provenance or citations matter for your use, ask the publisher for sources before relying on the skill for high-stakes tasks.

Purpose & Capability: okThe name/description (math foundation, core topics) align with the SKILL.md content (lists mathematical domains and milestones). There are no unexpected dependencies or credentials declared.
Instruction Scope: noteSKILL.md contains only a topical knowledge outline rather than runtime commands or data-collection instructions. That's safe from a security perspective but means the skill offers no procedural or external integrations — its scope is limited to providing topic guidance.
Install Mechanism: okNo install spec or code files are present (instruction-only). That minimizes risk because nothing is downloaded or written to disk.
Credentials: okThe skill requests no environment variables, credentials, or config paths, which is proportionate to an informational/math knowledge skill.
Persistence & Privilege: okalways is false and the skill does not request elevated persistence or system-wide configuration changes. Autonomous invocation is allowed by default but combined with the skill's read-only nature this is low risk.