Back to skill
Skillv0.1.0

ClawScan security

trend-analysis · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 15, 2026, 8:49 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill's instructions and resource needs are consistent with its stated purpose (trend detection using linear regression and Sen's slope); it is an instruction-only guide that does not request credentials or unusual system access.
Guidance
This appears to be a straightforward, coherent guide for statistical trend analysis. Before using: ensure your environment has Python and the required packages (scipy, pandas, pymannkendall) or install them from trusted sources; confirm your data files are the intended local CSVs (the examples read precipitation.csv); and remember the guidance about minimum sample size and method assumptions. There are no credential requests or network calls in the guide, so risk is low, but always be cautious when running code snippets from any third-party skill in production environments.

Review Dimensions

Purpose & Capability
okThe name/description (trend analysis) matches the SKILL.md content (linear regression and Mann–Kendall/Sen's slope). The examples and methods shown are appropriate for environmental time-series trend detection.
Instruction Scope
okInstructions are limited to reading local data (e.g., a CSV), running scipy/pandas/pymannkendall analyses, and printing results. There are no directives to read unrelated system files, access network endpoints, or exfiltrate data.
Install Mechanism
noteNo install spec is provided (instruction-only). The guide references Python libraries (scipy, pandas, pymannkendall) but does not declare them; users will need these packages available in the execution environment.
Credentials
okThe skill requests no environment variables, credentials, or config paths — proportional to an offline analytical guide. The only implicit requirement is access to local data files to analyze.
Persistence & Privilege
okalways is false and there are no installation hooks or requests to modify agent/system configuration. The skill does not request persistent or elevated privileges.