Back to skill
Skillv1.0.2
ClawScan security
MIND Language · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 4, 2026, 1:34 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only skill that provides a language specification for generating .mind source files; it does not request credentials, install software, or ask for system access.
- Guidance
- This skill is a static language specification and appears safe to install: it neither asks for secrets nor pulls code from external URLs. Before asking the agent to save, compile, or run generated .mind files, verify the produced source yourself and only run it in trusted build/run environments. If you later grant the agent filesystem or executor permissions (e.g., to write files, invoke a compiler, or run binaries), be aware that executing generated code carries the usual risks — review outputs and limit runtime privileges and network access accordingly.
Review Dimensions
- Purpose & Capability
- okName/description (MIND language authoring) match the content: the skill is a language reference and generation helper. It does not request unrelated binaries, credentials, or config paths, which is appropriate for an instruction-only spec.
- Instruction Scope
- okSKILL.md contains language grammar, examples, and guidance for writing .mind files. It does not instruct the agent to read system files, environment variables, or send data to external endpoints. The runtime guidance is scoped to producing language source and explanations.
- Install Mechanism
- okNo install specification or external downloads are present (instruction-only). Nothing will be written to disk by the skill itself during install.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. This is proportionate for a documentation/authoring skill.
- Persistence & Privilege
- okalways is false and normal autonomous invocation is allowed. That default is expected for skills and is not combined with broad access or persistence, so no elevated privilege concerns are present.