Back to skill
Skillv0.0.1

ClawScan security

RabbitMQ client guide for Tencent Cloud TDMQ · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 16, 2026, 8:11 AM
Verdict
Benign
Confidence
high
Model
gpt-5-mini
Summary
This is an instruction-only RabbitMQ client coding and troubleshooting guide consistent with its stated purpose and does not request extra credentials, binaries, or install code.
Guidance
This skill is an instruction-only client-side RabbitMQ guide and is internally consistent with its description. It does not install software or ask for credentials, but be careful when pasting real code or logs: do not include connection strings, passwords, or other secrets in snippets you share. Review any generated code before running (especially production config changes), and if you need the skill to operate against real resources, supply only scoped/test credentials and rotate them afterward.

Review Dimensions

Purpose & Capability
okName/description match the provided SKILL.md and reference files: the content is a RabbitMQ client coding/review/troubleshooting guide for Tencent Cloud TDMQ and the included references expand on best practices and reliability. There are no unrelated requirements (no env vars, binaries, or install steps).
Instruction Scope
okRuntime instructions describe how to generate, review, and troubleshoot client code (connection management, confirms, ACKs, prefetch, etc.). The skill triggers when the user posts RabbitMQ client code or symptoms — which is coherent with its purpose. The instructions do not ask the agent to read unrelated system files, environment variables, or to send data to unexpected external endpoints.
Install Mechanism
okNo install spec and no code files that execute — instruction-only skill, so nothing is written to disk or downloaded during install.
Credentials
okThe skill declares no required environment variables, credentials, or config paths. The guidance references Tencent Cloud documentation URLs for context, which is appropriate and expected.
Persistence & Privilege
okDefaults are used (always: false, agent-invocable allowed). The skill does not request persistent presence or system-level privileges and does not modify other skills' configs.