BayHustleLocal
AdvisoryAudited by Static analysis on May 9, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may browse or scrape listing sites while helping with research, which could expose logged-in marketplace context or run searches on sites with usage restrictions.
The skill explicitly directs browser automation against marketplace/listing sites. This is aligned with its stated research purpose, but automated browsing or scraping can have privacy, account-session, or terms-of-service implications.
Use browser-automation skill for Craigslist, Facebook Marketplace, Nextdoor searches.
Keep browser searches user-approved, avoid using private or logged-in marketplace data unless intended, and do not let the agent buy, post, message, or scrape at scale without explicit consent.
Relevant saved notes or workspace files could influence recommendations, and unrelated local information might be seen if the search is not kept narrow.
The skill may consult persistent memory or workspace files. This is purpose-aligned for reusing known parking data, but the scope of which files or memories may be read is not fully specified.
Local Data: Check workspace files or memory for known spots.
Limit use to clearly relevant files such as the referenced parking notes, and ask before reading broader workspace content or reusing saved memory.
