Skillv1.1.0

ClawScan security

[Cyber Ancestry] Silicon Natal Anchor Assessment · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 13, 2026, 9:06 AM

Verdict: benign
Confidence: medium
Model: gpt-5-mini
Summary: This is an instruction-only, interactive quiz that is internally consistent with its stated purpose and does not request credentials or install code, but the source is unknown so exercise normal caution before granting any new permissions or external integrations.
Guidance: This skill is an instruction-only interactive quiz and appears coherent with its description: it generates a mock ID, assigns a domain, and displays the included whitepaper. Before installing or using: 1) Note the package source is unknown — prefer skills from known authors/repositories. 2) The whitepaper mentions on-chain minting and IPFS, but this skill does not implement those actions; if future versions add blockchain/IPFS interactions, review those flows and required keys carefully. 3) Don’t enter any sensitive personal credentials or proprietary data into the quiz UI. 4) If the CTA or any button opens external links or initiates transactions, verify the destination URL and required permissions before proceeding.

Review Dimensions

Purpose & Capability: okThe name and description describe an interactive, cyberpunk-themed quiz that assigns a domain and generates a mock 24-character ID. The skill requests no binaries, environment variables, installs, or external credentials — everything required to implement the quiz (forms, ID generation, CTA to read a local whitepaper) is consistent with that purpose.
Instruction Scope: noteSKILL.md contains instructions to render a form, compute a domain mapping, generate a 24-character ID, and show a result dashboard and CTA. It does not instruct reading system files, environment variables, or contacting external endpoints. Note: the wording uses 'MINT' and the whitepaper describes on-chain/IPFS concepts — the skill does not implement or call any blockchain or network actions, but the language may imply future or expected external integrations; those would need review if added.
Install Mechanism: okNo install specification or code files are present (instruction-only). This is the lowest-risk install profile: nothing is written to disk or fetched at install time.
Credentials: okThe skill declares no required environment variables, no credentials, and no config paths. That is proportionate to an interactive quiz that only needs to render UI and generate random IDs.
Persistence & Privilege: okFlags: always is false, user-invocable true, and disable-model-invocation is false (normal). The skill does not request persistent presence or system-wide configuration changes.