Back to skill
Skillv1.0.0
ClawScan security
Flutter Animations · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 8, 2026, 2:08 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only Flutter animation guide that asks only for the flutter binary and contains no code, credentials, or unusual install steps — its declared requirements match its content.
- Guidance
- This skill appears internally consistent and low-risk: it is an instruction-only Flutter animation guide and only requires the Flutter SDK. Before installing, you may want to (1) verify the upstream source and license cited in README if provenance matters to you, (2) inspect the SKILL.md and any referenced local files (the README lists additional 'references/' files) to ensure the examples meet your expectations, and (3) be aware that installing the skill involves copying files into your OpenClaw workspace (no automated downloads or credential requests). If you need cryptographic assurance of origin, obtain the content from the original GitHub/skills.sh repository referenced in README.
Review Dimensions
- Purpose & Capability
- okThe name/description (Flutter animation guide) aligns with the SKILL.md and README content: examples and explanations of implicit/explicit/Hero/staggered/physics animations. The only required binary is 'flutter', which is appropriate. The README cites an upstream source (madteacher), though the skill's registry source is 'unknown' — that's a provenance note, not a functional mismatch.
- Instruction Scope
- okSKILL.md contains documentation and code examples only. It does not instruct the agent to read unrelated system files, exfiltrate data, call external endpoints, or access credentials. The README's suggested install step (copying files into ~/.openclaw/workspace/skills) is a normal, user-initiated placement of skill files.
- Install Mechanism
- okThere is no automated install spec and no downloads or extract operations. This is the lowest-risk pattern (instruction-only). The README shows a manual copy command for local installation, which writes files to the user's OpenClaw workspace but does not execute arbitrary installers.
- Credentials
- okThe skill declares no environment variables, no credentials, and only requires the Flutter binary. There are no requests for unrelated secrets or config paths; required access is proportional to the stated purpose.
- Persistence & Privilege
- okFlags show always:false and normal model invocation behavior. The skill does not request or describe modifications to other skills or global agent settings. It will be loaded by OpenClaw when appropriate, which is standard.