Back to skill
Skillv1.0.0
ClawScan security
Podcast Insider Top-10 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 15, 2026, 4:10 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only podcast industry digest that coherently asks the agent to fetch and synthesize public RSS feeds and search for context; it requests no credentials or installs and its actions match its stated purpose.
- Guidance
- This skill appears coherent and lightweight: it will fetch public RSS feeds and use web search for context, and it asks for no credentials or installs. Before installing, confirm you are comfortable with the agent making outbound network requests (the web_fetch/web_search calls) and verify you trust the listed feed sources. If you handle sensitive or proprietary information, avoid including it in queries because web_search may forward query text to external services. If you want stricter privacy, request a version that works offline or restricts web_search usage. Also be aware summaries may condense or omit nuance — verify any critical facts against the original source links the skill provides.
Review Dimensions
- Purpose & Capability
- okThe skill's name/description (podcast industry top-10 digest) aligns with its runtime instructions: aggregating specified public RSS feeds, ranking items, categorizing, and using web_search for context. It does not request unrelated binaries, credentials, or paths.
- Instruction Scope
- noteSKILL.md limits activity to parsing listed RSS feeds, cross-referencing stories, classifying items, and using web_search for deeper context. This stays within the expected scope. Note: web_search and web_fetch are external network actions — ensure you are comfortable with the agent issuing network requests and (depending on platform) sending queries or snippets to the search provider.
- Install Mechanism
- okNo install spec or code files are present (instruction-only), so nothing is written to disk or installed by the skill itself.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. The declared tools (web_fetch, web_search, LLM Reasoning) are appropriate for the task. As a reminder, using web_search may transmit search queries externally — this is expected for context lookups but may expose query text.
- Persistence & Privilege
- okalways is false and the skill does not request persistent presence, nor does it modify other skills or system-wide settings. Autonomous invocation is allowed by platform default but the skill itself does not demand elevated privileges.