Skillv0.1.0

ClawScan security

Animation Shader · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 6, 2026, 7:51 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only domain-knowledge skill about toon/animation shaders; its files, instructions, and requirements are coherent with that purpose and it does not request credentials, install code, or external endpoints.
Guidance: This skill is a read-only knowledge bundle for shader design and appears internally consistent. Before installing: (1) Note that the repository contains many third‑party shader references — check licensing if you plan to copy or redistribute shader code in your projects. (2) Although the skill itself does not exfiltrate data or require credentials, if you pair it with a workflow skill that can call external services, review that workflow's network behavior to avoid unintentionally sending proprietary assets or code to external endpoints. (3) The included shader pseudo-code may contain implementation oddities (e.g., vertex discard returning NaN in docs); treat the examples as guides and test carefully in a safe build environment.

Purpose & Capability: okThe name/description (animation-style shaders) matches the provided content: a large set of reference documents and presets for lilToon, Poiyomi, RToon, SToon, UTS2, etc. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope: okSKILL.md is a domain-knowledge guide. Its runtime instruction is to consult the included references (the skill's own files). It does not instruct the agent to read system files, environment variables, or to transmit data to external endpoints.
Install Mechanism: okThere is no install spec and no code files to execute. This is the lowest-risk model: nothing is downloaded or written to disk by an installer.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. None of the instructions access secrets or unrelated services.
Persistence & Privilege: okalways is false and model invocation is enabled (the platform default). The skill does not request permanent presence or modify other skills or system-wide settings.