Back to skill
Skillv0.1.0

ClawScan security

locational-marginal-prices · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 15, 2026, 4:04 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill is internally consistent: it is an instruction-only guide for extracting LMPs from a DC-OPF solved with CVXPY, and it does not request extra credentials, installs, or unrelated capabilities.
Guidance
This skill is a focused how-to for extracting LMPs from a CVXPY DC-OPF model and appears coherent. Before using it, ensure your runtime provides the expected data structures (buses, gens, branches, baseMVA, Pg, theta, etc.) and that CVXPY and a solver that exposes duals (or an alternative solver) are installed. Verify scaling (per-unit × baseMVA) and sign conventions for your model. Because it is instruction-only, it doesn't request credentials or install software itself — but running the provided code requires a Python environment with the correct solver and data; confirm those are trustworthy and present.

Review Dimensions

Purpose & Capability
okName/description match the instructions: the SKILL.md describes how to capture balance constraints, solve a CVXPY problem, and read duals to produce LMPs. Nothing in the file requests unrelated services, binaries, or secrets.
Instruction Scope
noteInstructions are narrowly focused on extracting dual values and computing related diagnostics (binding lines, reserve MCP, counterfactuals). They assume pre-existing variables and data structures (n_bus, buses, Pg, gen_bus, B, theta, baseMVA, branches, Rg, reserve_requirement, etc.) and reference another skill ('dc-power-flow') for flow details. Also the code uses cp.CLARABEL as the solver; the user/agent must ensure an appropriate solver that exposes duals is available. These assumptions are normal for an instruction snippet but require the runtime to provide the expected context.
Install Mechanism
okInstruction-only skill with no install spec and no code files. No downloads or package installs are declared by the skill itself.
Credentials
okThe skill requires no environment variables, credentials, or config paths. There are no requests for unrelated secrets or system access.
Persistence & Privilege
okalways is false and the skill is user-invocable; it does not request persistent system-wide privileges or attempt to modify other skills or agent settings.