Back to skill
Skillv1.1.0
ClawScan security
Daily Song Recommender · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 7, 2026, 12:57 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's instructions, requirements, and behavior are consistent with a web-search–based music recommender and do not request unrelated credentials or install any code.
- Guidance
- This skill appears coherent and low-risk: it only uses web searches to find songs and returns links. Before installing, confirm the platform's web_search tool respects privacy and rate limits, be cautious if it ever asks for streaming service credentials (this skill does not), and review any links it provides before clicking.
Review Dimensions
- Purpose & Capability
- okName/description state it will search the web for music recommendations; the SKILL.md only instructs using a web_search tool and formatting results. No unrelated binaries, env vars, or services are requested.
- Instruction Scope
- okRuntime instructions are limited to asking clarifying questions, running web_search queries, and returning formatted recommendations with links and sources. They do not direct reading files, accessing credentials, or contacting unexpected endpoints.
- Install Mechanism
- okNo install spec and no code files are present (instruction-only), so nothing is written to disk or fetched during install.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths—proportional to a search-based recommender.
- Persistence & Privilege
- okalways is false and the skill is user-invocable; it does not request persistent system presence or permission to change other skills or system settings.