Back to skill
Skillv1.0.1

ClawScan security

Vvvv Shaders · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignMar 5, 2026, 10:43 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill is an instruction-only guide for writing SDSL shaders and its requirements and instructions are consistent with that purpose.
Guidance
This skill is a documentation-only helper for writing SDSL shaders and appears internally consistent. Because it is instruction-only and requests no credentials or installs, it cannot itself download or run code. Before using: (1) note the package/source has no homepage and an unknown source—review the text to ensure it matches what you expect; (2) treat any code it generates like untrusted code—review and test shader code in a safe environment before using in production; (3) avoid pasting secrets into prompts provided to any skill or agent. Overall the skill is coherent with its stated purpose.

Review Dimensions

Purpose & Capability
okName/description (SDSL/vvvv/Stride shaders) align with the content of SKILL.md and syntax-rules.md; there are no extra binaries, credentials, or config paths requested that would be unrelated to authoring shaders.
Instruction Scope
okSKILL.md contains only documentation, examples, and coding guidance for SDSL/HLSL; it does not instruct the agent to read system files, access environment variables, call external endpoints, or perform unrelated actions.
Install Mechanism
okNo install spec or code is provided (instruction-only), so nothing is written to disk or downloaded during installation.
Credentials
okThe skill requires no environment variables, credentials, or config paths — this is proportionate for a documentation/coding helper.
Persistence & Privilege
okalways is false and the skill has no install actions or self-modifying behavior; it does not request persistent system privileges.