Skillv2.0.0

ClawScan security

umemployment-skill · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 17, 2026, 10:10 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requirements and runtime instructions are consistent with a multilingual unemployment support coach; it asks for no credentials or installs and stays within its stated remit, though some advice nudges users to download or forward files (legal/ethical caution).
Guidance: This skill appears coherent and does what it advertises: empathetic, multilingual unemployment support with concrete templates and stories. Before installing or using it, note two practical cautions: (1) Several checklist items advise downloading or forwarding files to preserve evidence when leaving a job — following those steps can raise legal or policy issues (company IP, confidentiality). Only copy personal data and consult company policy or a lawyer before taking anything that may belong to your employer. (2) The skill gives mental‑health and legal guidance but is not a substitute for professional counsel—encourage users in crisis to seek local emergency/clinical help. If either of these is a concern, review the SKILL.md patterns (e.g., Day‑of‑Layoff, Legal Rights) to decide whether to proceed or to modify the guidance you allow the agent to give.

Purpose & Capability: okName, description, and included reference/story/pattern files all align with an empathy-first job‑search/unemployment coaching skill. The skill requests no binaries, env vars, or external installs that would be disproportionate to its stated purpose.
Instruction Scope: noteSKILL.md instructs the agent to validate feelings, tell stories, and give practical job search patterns (resume, interviews, legal rights, emergency checklists). This is within scope, but several patterns recommend user actions that involve downloading or forwarding files and saving evidence (e.g., "download personal files, contacts, calendar", "forward important emails to personal account"). Those lines are coherent for a layoff checklist but have legal/ethical implications for handling company data—users should be warned to follow company policy and local law.
Install Mechanism: okInstruction-only skill with no install spec and no code files to execute. Lowest-risk install profile.
Credentials: okThe skill declares no required environment variables, no credentials, and no config paths. There is no disproportionate request for secrets or unrelated credentials.
Persistence & Privilege: okalways:false and user-invocable:true. The skill does not request persistent system-wide privileges, nor does it modify other skills or the agent config. disable-model-invocation is false (normal).