Skillv1.1.0

ClawScan security

UI Design Tips · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 15, 2026, 3:13 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only UI/UX guidance skill whose requested footprint (no installs, no env vars, no binaries) matches its stated purpose.
Guidance: This skill is an instruction-only collection of UI/UX guidance and appears internally consistent with its name and description. Before installing: (1) Note provenance is unknown (no homepage) — content may be aggregated from various sources; if you care about source attribution or licensing, review the reference notes (some excerpts reference MIT-licensed uiverse components). (2) There are no elevated permissions requested, so it cannot exfiltrate secrets on its own, but be mindful any design snippets you copy into your product must meet licensing and privacy requirements. (3) Some patterns (heavy animations, neon/glitch effects, dark-mode suggestions, or social-login placement) may be inappropriate for regulated contexts (healthcare, finance) or accessibility-sensitive audiences — validate accessibility (contrast, prefers-reduced-motion, touch targets) and legal/brand constraints before applying. (4) If you need higher assurance about origin/updates, prefer skills with a verifiable homepage or publisher.

Purpose & Capability: okName/description match the provided materials: SKILL.md and reference docs are detailed UI/UX guidance. Nothing requested (no env, no binaries, no config paths) appears unrelated to a design tips skill.
Instruction Scope: okSKILL.md and reference files contain only design guidance, checklists, patterns, and snippets; they do not instruct the agent to read system files, contact external endpoints, or access credentials.
Install Mechanism: okNo install spec and no code files are present (instruction-only). No downloads or archive extraction are requested.
Credentials: okThe skill declares no required environment variables, credentials, or config paths; this is proportionate to the described function.
Persistence & Privilege: okalways:false and normal agent invocation; the skill does not request persistent/system-wide privileges or modify other skills' settings.