Skillv1.0.1

ClawScan security

Master Marketing · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 12, 2026, 6:25 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: Instruction-only marketing skill whose requirements and runtime instructions are consistent with its stated purpose (growth strategy, content remixing, trend monitoring).
Guidance: This skill is instruction-only and appears coherent for marketing work: it suggests monitoring public trend sources and offers content strategy templates. Before using it, do not supply any API keys, passwords, or private account tokens unless you trust the skill author. If you plan to have the agent scrape competitor sites or post on platforms, check terms of service and rate limits. Because the skill can be invoked autonomously by the agent (platform default), be cautious if you combine it with connectors that have write access to your accounts — that risk comes from connectors/credentials you provide, not from this instruction-only skill.

Purpose & Capability: okName and description match the contents of SKILL.md: growth strategy, content repurposing, and trend monitoring. There are no unexpected binaries, installs, or environment variables requested that would be unrelated to marketing tasks.
Instruction Scope: okSKILL.md contains guidance for metrics, platform-specific content, and public trend sources (Google Trends, Twitter/X, Reddit, Product Hunt, TechCrunch). These public data sources are appropriate for a trend-monitoring marketing skill. The instructions do not request reading local files, secret env vars, or accessing system configuration.
Install Mechanism: okNo install spec and no code files — instruction-only. That minimizes disk writes and arbitrary code execution risks. This is proportionate for a guidance-style marketing skill.
Credentials: okNo credentials, env vars, or config paths are required. That is appropriate; the skill does not ask for unrelated secrets or broad access.
Persistence & Privilege: okalways is false and the skill does not request persistent system-level privileges or modifications to other skills. Autonomous model invocation is allowed (platform default) but nothing in the skill grants elevated or persistent privileges.