Back to skill
Skillv0.1.0
ClawScan security
hex-grid-spatial · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 13, 2026, 3:25 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is a self-contained, instruction-only hex-grid utility whose code and instructions match the stated purpose and request no unexpected permissions or network access.
- Guidance
- This skill appears to be a straightforward, local hex-grid math utility and does not ask for credentials, network access, or installs. If you plan to use it in production, confirm the source/author (no homepage provided), review the small Python file to ensure it meets your needs, and run it in your normal code-review or sandbox workflow. If provenance is important, ask the publisher for a homepage, license, or additional metadata before wide deployment.
Review Dimensions
- Purpose & Capability
- okName/description, SKILL.md and the included Python module all describe hex grid utilities (odd-r offset) and the required functions (neighbors, distance, range). The registry slug mentioning Civ6 is consistent with the module docstring and examples.
- Instruction Scope
- okSKILL.md contains only function documentation, examples, and algorithms for hex math; it does not instruct the agent to read system files, call external endpoints, or access environment variables.
- Install Mechanism
- okNo install spec is present (instruction-only with a single Python source file). Nothing is downloaded or written to disk by an installer.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths; the operations are purely computational and do not need secrets or external service access.
- Persistence & Privilege
- okalways is false and the skill does not request persistent system-level privileges or modify other skills; autonomous invocation is allowed by default but not combined with other high-risk signals.