Pluginv1.0.0

ClawScan security

Minimalist Entrepreneur Skills · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 7, 2026, 11:21 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is a minimal, instruction-only bundle that simply enumerates a set of sub-skills and does not request credentials, install anything, or include runtime instructions that conflict with its stated purpose.
Guidance: This bundle itself is minimal and appears benign, but it only lists child skills. Before installing or enabling it, review each listed subskill (find-community, validate-idea, me-mvp, etc.) to confirm they don't request unexpected credentials, install code, or send data externally. Also consider the trustworthiness of the owner ID and test in a restricted environment if you are unsure.

Purpose & Capability: okThe bundle name 'Minimalist Entrepreneur Skills' and its openclaw.bundle.json (which lists subskills like 'validate-idea', 'me-mvp', etc.) are consistent: the skill appears to be a lightweight aggregator of entrepreneur-related micro-skills and does not request unrelated capabilities or credentials.
Instruction Scope: noteSKILL.md contains only a title and one-line description ('me-skills') and provides no runtime instructions. That is not harmful, but it means the actual behavior depends entirely on the listed child skills; the bundle itself contains no guidance that reads files, env vars, or external endpoints.
Install Mechanism: okNo install spec and no code files are included. Nothing will be downloaded or written to disk by this bundle alone.
Credentials: okThe bundle declares no required environment variables, credentials, or config paths. There is no disproportionate credential request in this package itself.
Persistence & Privilege: okFlags show always:false and normal model invocation. The bundle does not request permanent presence or elevated agent-wide privileges.