# 2026-03-03

## Skills security decision
- Installed several ClawHub skills successfully.
- Two candidate skills were flagged as suspicious by ClawHub/VirusTotal and were NOT force-installed:
  - `kubectl`
  - `faster-whisper-transcribe`
- Built safer local equivalents instead:
  - `skills/swarm-kubectl-safe`
  - `skills/whisper-local-safe`
- Decision rationale: avoid force-installing flagged third-party skills in this environment.
- Revisit policy: we may revisit those flagged skills later after manual security review and explicit approval.