Back to skill
Skillv0.1.0
ClawScan security
lomb-scargle-periodogram · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 15, 2026, 5:09 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only guide for computing Lomb–Scargle periodograms using the lightkurve Python library and its requirements and instructions are coherent with that purpose.
- Guidance
- This skill is a straightforward, instruction-only guide for using lightkurve to compute Lomb–Scargle periodograms. If you install dependencies, prefer installing from the official PyPI packages or your environment's package manager and verify package provenance. Note the examples expect you to provide time, flux, and error arrays (they do not load data for you). If you plan to run code in a shared or production environment, review and test the code snippets and consider using virtual environments to isolate installed packages.
Review Dimensions
- Purpose & Capability
- okName and description match the SKILL.md content: examples and dependency list (lightkurve, numpy, matplotlib) are exactly what a Lomb–Scargle periodogram helper would need.
- Instruction Scope
- okSKILL.md contains only example Python code and guidance for period selection, plotting, and interpretation. It does not instruct reading unrelated files, accessing credentials, calling external endpoints, or collecting data outside the stated astronomy context. Example snippets assume caller provides time/flux arrays, which is normal.
- Install Mechanism
- okNo install spec; dependency installation is limited to standard pip packages (lightkurve, numpy, matplotlib) mentioned in docs. No downloads from untrusted URLs or archive extraction are specified.
- Credentials
- okSkill declares no required environment variables, credentials, or config paths. The requested packages and examples are proportionate to the stated functionality.
- Persistence & Privilege
- okSkill is instruction-only, not always-enabled, and does not request persistent or cross-skill configuration. Autonomous invocation is allowed by platform default but is not combined with any broad privileges.