Back to skill
Skillv1.0.0
ClawScan security
Skill 107 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 8, 2026, 12:57 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instructional, read-only skill about distributed-system design; its contents, requirements, and files are consistent with that purpose and it does not request credentials, install anything, or instruct the agent to access unrelated data.
- Guidance
- This skill appears to be an educational reference on distributed-system patterns and is internally consistent. Before installing: note that the package has no listed homepage or external provenance (owner ID only), so if you require content from a trusted source prefer skills with a verifiable maintainer or repository. Because it requests no credentials and has no install steps, it presents minimal risk; treat it as read-only documentation. If you plan to copy example code into production, review and test it carefully — the snippets are illustrative, not production-ready.
Review Dimensions
- Purpose & Capability
- okThe name and description (distributed system patterns) match the SKILL.md content. The included package.json is purely metadata. There are no unexpected env vars, binaries, or config paths requested that would be unrelated to an educational design guide.
- Instruction Scope
- okSKILL.md contains explanatory text, examples, and small code snippets (an idempotency example) but does not instruct the agent to run shell commands, read local files, access environment variables, or transmit data to external endpoints. The instructions stay within an informational/educational scope.
- Install Mechanism
- okThere is no install spec and no code files to be written or executed. This is an instruction-only skill, which minimizes installation risk.
- Credentials
- okThe skill declares no environment variables, credentials, or config paths. Nothing requests access to secrets or unrelated services.
- Persistence & Privilege
- okFlags are default (always:false, agent invocation allowed). The skill does not ask for persistent presence or to modify other skills or system-wide settings.