Back to skill
Skillv0.1.0
ClawScan security
matched-filtering · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 15, 2026, 10:27 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only guide for performing matched filtering with PyCBC and its requirements and instructions align with that stated purpose.
- Guidance
- This is a coherent, instruction-only PyCBC matched-filtering guide. Before using it: 1) verify you trust the (unknown) source or run the instructions in an isolated environment; 2) be prepared to install PyCBC and its native dependencies (pip install pycbc may require system libraries and can be non-trivial); 3) ensure you provide correctly preprocessed 'conditioned' data and 'psd' objects — the skill assumes those exist but does not show how to compute them; and 4) because the skill contains executable Python snippets, review them for correctness before running on real data.
Review Dimensions
- Purpose & Capability
- okName and description match the SKILL.md content. The instructions rely on PyCBC and numpy (explicitly mentioned) which are the expected dependencies for this task; no unrelated credentials, binaries, or config paths are requested.
- Instruction Scope
- noteThe SKILL.md contains concrete code snippets for time- and frequency-domain matched filtering and only references domain-specific objects (e.g., conditioned, psd). It does assume the agent/environment provides preconditioned detector data and PSD objects but does not instruct reading unrelated files, environment variables, or exfiltration. The guide is prescriptive but omits how to obtain or compute 'conditioned' and 'psd' (this is a domain gap, not a security issue).
- Install Mechanism
- okNo install spec in the registry; the document recommends installing PyCBC and numpy via pip, which is appropriate and low risk. There are no download URLs or custom installers that would introduce high-risk arbitrary code retrieval.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. The requested scope (none) is proportional to an instruction-only data-processing guide.
- Persistence & Privilege
- okalways is false, and the skill does not request persistent system presence or modify other skills or system settings. Autonomous invocation is allowed by default but is not combined with other concerning privileges.