Back to skill
Skillv1.0.0
ClawScan security
Riverpod · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 4, 2026, 9:42 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only Riverpod guide for Flutter; its requirements and instructions align with that purpose and it does not request credentials, installs, or make unexpected system demands.
- Guidance
- This skill is documentation-only and appears coherent with its stated purpose. Before using: (1) run the shown build_runner commands only inside a trusted Flutter project (they will modify generated files), (2) review any example network calls (Dio/api) to ensure you supply your own API endpoints and keys rather than copying credentials, and (3) verify Riverpod and Flutter version compatibility with your project. No credentials or installs are requested by the skill itself.
Review Dimensions
- Purpose & Capability
- okThe name/description match the SKILL.md and BEST_PRACTICES.md content: Flutter Riverpod patterns, providers, and build_runner usage. It requests no unrelated binaries, environment variables, or config paths.
- Instruction Scope
- okRuntime instructions are documentation and code snippets for using Riverpod in a Flutter project (including running 'flutter pub run build_runner ...'). There are no steps to read unrelated system files, exfiltrate data, or post to unexpected endpoints. Example code references network clients (e.g., Dio) but only as typical sample usage.
- Install Mechanism
- okNo install spec and no code files — this is instruction-only documentation. Nothing will be downloaded or written by an installer.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. Sample snippets mention APIs/clients that a developer would provide in their own project; the skill itself does not request secrets.
- Persistence & Privilege
- ok'always' is false and model invocation is normal. The skill does not request persistent system presence or modify other skills/configuration.