Review ClawHub or local Skill packages before installation, classify risk, and return a structured security report.