Skillv1.0.0

ClawScan security

Veda Greetings · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 3, 2026, 4:07 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only greetings skill that contains example greetings in several languages, requests no permissions, installs nothing, and is internally coherent.
Guidance: This skill appears low-risk: it only supplies greeting phrases and asks for no permissions or installs. Before installing, you may want to: (1) review the full SKILL.md to confirm no truncated or altered content (some lines looked cut off), (2) verify the greetings meet your cultural and tone requirements for your audience, and (3) test a few prompts to ensure the agent uses the provided phrases as intended. No special credentials or system access are required.

Purpose & Capability: okThe name and description (multilingual greetings) match the content: SKILL.md provides greeting phrases for multiple languages. There are no unexpected required binaries, environment variables, or config paths.
Instruction Scope: okThe instructions are narrowly scoped to providing culturally appropriate greetings and when to use them. They do not ask the agent to read files, access system state, call external endpoints, or collect credentials. Note: some header lines in the provided SKILL.md appear truncated (trailing '>'), but this is a content integrity/display issue rather than a scope concern.
Install Mechanism: okNo install spec and no code files are present (instruction-only), so nothing will be written to disk or executed beyond normal agent response generation.
Credentials: okThe skill declares no environment variables, no credentials, and no config paths — which is proportional and expected for a simple greetings skill.
Persistence & Privilege: okThe skill does not request persistent presence (always:false) and does not modify other skills or system settings. It can be invoked by the agent normally, which is standard for skills.