Back to skill
Skillv1.0.0
ClawScan security
build-customer-support-faq-page · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 23, 2026, 4:04 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only FAQ/content generator whose requirements and instructions are consistent with its stated purpose.
- Guidance
- This skill appears coherent and low-risk, but follow basic precautions before using: review all generated FAQ content before publishing, avoid including secrets or customer PII in prompts, and be aware the skill may call platform 'chat' and 'web_search' (so external queries could be made). If you want tighter control, restrict or monitor web_search usage and clarify which 'SkillBoss capabilities' the skill may call to avoid unexpected cross-skill data sharing.
Review Dimensions
- Purpose & Capability
- okName and description match the actual footprint: an instruction-only FAQ/content generator. No unrelated environment variables, binaries, or install steps are requested.
- Instruction Scope
- noteSKILL.md stays on‑topic (clarify audience, draft answers, refine output). It declares use of platform APIs 'chat' and 'web_search' which align with content creation. One mildly open-ended phrase — "Use the relevant SkillBoss capabilities to enrich assets or supporting data" — is vague and gives the agent broad discretion to call other platform capabilities, but this is not itself incoherent with the skill's purpose. The skill explicitly reminds reviewers to check outputs before publishing.
- Install Mechanism
- okNo install spec, no code files, and no downloads — lowest-risk, instruction-only artifact.
- Credentials
- okNo required environment variables, credentials, or config paths are declared or referenced. Nothing asks for unrelated secrets or system access.
- Persistence & Privilege
- okalways:false and no special privileges requested. The skill is user-invocable and allows normal autonomous invocation by the agent (platform default), which is appropriate for this kind of content-generation skill.