Back to skill
Skillv1.0.0
ClawScan security
Game Design Peak End Audit · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 26, 2026, 7:39 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- Instruction-only game-design audit focused on the peak-end rule; it requests no credentials, performs no installs, and its instructions are consistent with its stated purpose.
- Guidance
- This skill is low-risk and internally consistent: it’s a pure design prompt with bundled reference docs and no external access. Before installing, verify you trust the skill publisher (source unknown) and avoid supplying any sensitive production data when running audits. If you plan to use this in automated/long-running agents, periodically re-check the skill bundle for updates or added code, and do not grant environment credentials or file-system access beyond the design artifacts you intend to analyze.
Review Dimensions
- Purpose & Capability
- okThe name and description match the provided SKILL.md: the skill's purpose is to audit player memory via peak-end analysis and every required element (mapping peaks, diagnosing endings, producing recommendations) is coherent with that purpose.
- Instruction Scope
- okSKILL.md contains only design-audit steps, questions, and output structure. It refers to the included reference documents for style and output patterns (which are bundled). It does not instruct reading arbitrary system files, using credentials, calling external endpoints, or running commands outside the audit scope.
- Install Mechanism
- okThere is no install specification and no code files that would be written or executed on the host. Being instruction-only, it has a minimal on-disk footprint and low installation risk.
- Credentials
- okThe skill declares no required environment variables, no credentials, and no config paths. Nothing requested appears disproportionate to a game-design audit.
- Persistence & Privilege
- okFlags show always:false and normal model invocation settings. The skill does not request persistent presence, modify other skills, or ask for elevated system privileges.