Skillv0.1.0

ClawScan security

General Search Agent · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 16, 2026, 3:19 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: Instruction-only skill with minimal, coherent scope: it only provides a short guidance note about doing English Google searches and the current date; it requests no credentials, no installs, and performs no unexpected actions.
Guidance: This skill is essentially a short instruction/template: it gives a reminder to include the current date and to favor English queries for Google searches. It requests no permissions and installs nothing, so it poses minimal direct risk. However, it's also low-utility by itself — it does not implement search or connect to any search API. Before installing, decide whether you expected a skill that actually executes queries (which would typically require a web tool or API credentials). If you plan to let your agent perform web searches, verify how your agent/runtime performs those searches (browser/tool, third-party API) and whether that component needs separate review or credentials.

Purpose & Capability: okName/description (general search helper) match the content: a short instruction about using Google with English queries and including the current date. Nothing required by the skill (no env, no binaries) is out of scope.
Instruction Scope: noteSKILL.md contains only a brief guideline and template-variable mentions ($DATE, $SESSION_GROUP_ID). It's vague and minimal but stays within the claimed purpose. The vagueness means the agent's actual search implementation (not provided) will determine behavior.
Install Mechanism: okNo install spec and no code files — lowest-risk configuration. Nothing is written to disk or fetched at install time.
Credentials: okRequires no environment variables, credentials, or config paths. There is no disproportionate access requested.
Persistence & Privilege: okSkill is not always-on and does not request elevated persistence or modify other skills. Autonomous model invocation remains platform-default and is not a special privilege here.