Skillv3.0.1

ClawScan security

Validator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 19, 2026, 9:54 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's code and instructions are consistent with its stated purpose (input validation); it runs local checks and optional network lookups but does not request credentials or perform hidden exfiltration.
Guidance: This skill appears to do what it says: local validation plus optional network/DNS lookups. Before using it: (1) review or run the script locally from a trusted environment; (2) avoid passing real production secrets (full credit-card numbers, private files) unless you trust the runtime, because the tool will read and process whatever file or string you provide; (3) be aware that URL/domain commands will make outbound requests if curl/dig are available (which could reveal that you checked that host); (4) YAML validation attempts to import PyYAML if present — otherwise a basic fallback is used. If those behaviors are acceptable, the skill is internally coherent.

Purpose & Capability: okName/description (validate emails/URLs/phones/dates/patterns) match the shipped script and SKILL.md. Required tools listed (python3, curl, dig) are used by the script for JSON/YAML/csv parsing and optional network/DNS checks.
Instruction Scope: noteThe SKILL.md commands map directly to functions in scripts/script.sh. The script reads user-specified files (json/yaml/csv) and may perform network actions (curl for URL HTTP status, dig for DNS) when those binaries are present — expected for this tool, but worth noting because these actions contact external hosts and the tool will read any file path you supply.
Install Mechanism: okInstruction-only skill with a bundled shell script; there is no install step, no external downloads, and no archive extraction. Nothing is written to disk beyond running the provided script.
Credentials: noteThe skill declares no required environment variables and does not request credentials. Internally it sets temporary env vars (e.g., FILE, NUM) for local subprocesses. It can process sensitive inputs (credit card numbers, files) supplied by the user — treat those inputs as sensitive when using the tool.
Persistence & Privilege: okDoes not request persistent presence (always:false), does not modify other skills or system config, and does not store credentials. Agent autonomous invocation default is unchanged.