Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
RealEstate
v3.0.0Real estate transaction support with affordability analysis, property evaluation, and offer strategy. Use when user mentions buying a home, selling property,...
⭐ 0· 403·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description match the two included scripts: affordability calculation and property evaluation. However, SKILL.md advertises many other scripts (build_offer.py, prep_inspection.py, review_lease.py, track_transaction.py, analyze_market.py, plus multiple reference docs) that are not included in the bundle. That incomplete packaging is an incoherence: either the skill is partial/incomplete or the metadata is inaccurate.
Instruction Scope
The runtime instructions direct the agent to run multiple scripts and to store data under memory/realestate/ (SKILL.md). The two included scripts operate locally, print output, and (evaluate_property.py) write to ~/.openclaw/workspace/memory/realestate/properties.json. The instructions reference additional workflows (file-based lease review, inspection prep, market analysis) that would require additional scripts or external data; those are missing. Also the policy statements like 'NEVER provide investment advice' are guidance only and not enforced by code or controls.
Install Mechanism
No install spec and no external downloads — instruction-only plus two small local scripts. This minimizes supply-chain risk; nothing is being fetched or executed from unknown URLs.
Credentials
The skill requests no environment variables, no credentials, and accesses only a single user-local path (~/.openclaw/workspace/memory/realestate). There are no surprising secret requests or network endpoints.
Persistence & Privilege
The skill writes persistent data to the user's workspace memory directory (properties.json). always:false (not force-installed) and no elevated privileges are requested. Persisting user data to ~/.openclaw/workspace/memory/realestate is consistent with the stated 'local storage' claim, but users should be aware this creates files under their home directory that the skill will read/write.
What to consider before installing
This skill appears to implement two local helpers (affordability and property evaluation) and stores records under ~/.openclaw/workspace/memory/realestate; that part is coherent and low-risk. However, SKILL.md advertises many additional scripts and docs that are missing, and policy statements (e.g., 'NEVER provide investment advice') are not enforceable. Before installing or using it: 1) ask the publisher for the missing scripts/reference files or verify the bundle is intentionally minimal; 2) inspect any additional scripts for network access or credential use before running; 3) be aware it will create/modify files in ~/.openclaw/workspace/memory/realestate — back up or inspect that directory and remove it if you want no persistence; 4) treat any legal/financial recommendations as educational only and consult licensed professionals. If you cannot obtain the missing files or explanation from the author, avoid relying on the advertised workflows that are not present.Like a lobster shell, security has layers — review code before you run it.
buyingvk97czx61t86kfmkzjysg7xp6f182hk6zhome-buyingvk97dcx69dazfm7d0s34btxw4dh82m24dhousingvk97dcx69dazfm7d0s34btxw4dh82m24dlatestvk97dcx69dazfm7d0s34btxw4dh82m24dmortgagevk97dcx69dazfm7d0s34btxw4dh82m24dpropertyvk97dcx69dazfm7d0s34btxw4dh82m24drealestatevk97dcx69dazfm7d0s34btxw4dh82m24drentingvk97czx61t86kfmkzjysg7xp6f182hk6zsellingvk97czx61t86kfmkzjysg7xp6f182hk6z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.