Skillv0.1.0

ClawScan security

Dotline Art · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 12, 2026, 9:12 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This skill is internally consistent with its stated purpose (generating terminal ASCII/point-line art) and contains only a local Python script that prints art; no credentials, network calls, or installs are requested.
Guidance: This skill runs a local Python script to print ASCII 'dot-line' art. It does not access the network or any secrets. Before installing/using: ensure python3 is available on the agent runtime (the registry metadata does not declare this), and if you want proper Chinese->pinyin conversion, install the optional pypinyin package (pip install pypinyin). Note: the included evals expect ANSI color codes, but the provided script does not add color — if colored output is important, review/modify the script accordingly.

Purpose & Capability: noteThe name, description, SKILL.md, and included Python script all align: the skill converts input text (Chinese -> pinyin if available) into ASCII point-line art. Minor mismatch: the skill metadata lists no required binaries, but SKILL.md instructs running python3 and the script optionally uses the pypinyin library; those runtime requirements are not declared in the registry metadata.
Instruction Scope: okThe SKILL.md instructs only to extract user input, optionally convert Chinese to pinyin, call the included script, and display output in-terminal. It does not request reading unrelated files, environment variables, or sending data externally.
Install Mechanism: okThere is no install spec; the skill is instruction-only plus an included local Python script. No remote downloads or package installations are automatically performed by the skill bundle.
Credentials: okThe skill requires no environment variables, credentials, or config paths. The script may optionally use the pypinyin package if installed, but this is a benign, local dependency and not a credential/secret.
Persistence & Privilege: okalways is false, the skill is user-invocable and does not request persistent presence or modify other skills or system-wide agent settings.