Back to skill
Skillv1.0.0
ClawScan security
PricingCalc Product & Service Pricing Calculator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 11, 2026, 9:30 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This skill is internally coherent with its stated purpose: a local pricing calculator implemented in JavaScript, with no network calls, no external installs, and no credential requirements.
- Guidance
- This appears low-risk: the code performs purely local math with no network access or credential use. Before installing, you may (1) review the short src/pricing-calc.js to confirm the formulas meet your needs, (2) run it in a sandbox or with non-sensitive sample data, and (3) remember this is not financial advice — validate results for critical decisions. Note the package author/homepage are not fully identified; if provenance matters, request a repository or contact info before relying on it in production.
Review Dimensions
- Purpose & Capability
- okName/description match the provided code and SKILL.md: the module implements service/product pricing, break-even, tiering, and discount impact functions — all appropriate for a pricing calculator. The source/homepage are not provided (author handle only), which reduces provenance but does not contradict purpose.
- Instruction Scope
- okSKILL.md usage and examples map directly to the exported PricingCalc API. Instructions do not ask the agent to read unrelated files, access environment variables, or transmit data externally.
- Install Mechanism
- okNo install spec (instruction-only skill) and the code is a local JS file. Nothing is downloaded or extracted at install time.
- Credentials
- okThe skill declares no required environment variables, no credentials, and the code does not read process.env or external configs — requested privileges are minimal and proportional to the task.
- Persistence & Privilege
- okalways is false and the skill does not request any persistent system changes or modify other skills. Autonomous invocation is allowed by platform default but the skill has no additional privileges.