Back to skill
Skillv1.0.0

ClawScan security

test · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 11, 2026, 1:06 AM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
The skill's files and runtime instructions are coherent with an AI 'geographer' persona: it asks for no credentials, performs no installs, and its instructions stay within the stated geographic analysis/design purpose.
Guidance
This skill appears internally consistent and low-risk: it only provides an expert geographer persona without asking for credentials or installing software. Two practical cautions: (1) provenance is unknown (no homepage/source repository provided), so you may want to prefer skills from known publishers if supply-chain provenance matters; (2) the agent may present confident-sounding geographic claims — verify critical technical or safety-sensitive information (e.g., engineering, policy decisions) against authoritative sources before acting on it.

Review Dimensions

Purpose & Capability
okName, description, and included files all describe a geography-focused agent; there are no unrelated environment variables, binaries, or config paths requested that would be inconsistent with that purpose.
Instruction Scope
okSKILL.md and accompanying docs instruct the agent to reason about climate, terrain, hydrology, and human geography. There are no instructions to read local files, access external endpoints, exfiltrate data, or use unrelated system resources.
Install Mechanism
okNo install spec and no code files — this is an instruction-only skill, so nothing will be written to disk or fetched during install.
Credentials
okThe skill requires no environment variables, credentials, or config paths; requested access is proportionate (none) to the stated functionality.
Persistence & Privilege
okalways is false and model invocation is enabled by default. The skill does not request persistent system privileges or modify other skills; its described memory is internal conversational state, which is expected for an agent persona.