Real Estate Master
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to be a purpose-aligned local real-estate investment calculator, with no evidence of hidden network access, credential use, persistence, or destructive behavior.
This looks safe to install from the provided artifacts, but treat configs and generated reports as private financial documents. Review the included Python scripts before running them and be careful when sharing investor-specific outputs or links.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may run local Python calculations using financial configuration files you provide.
The skill expects the user to run included Python scripts. This is central to the stated simulation purpose and the included code appears local-only, but it is still local code execution users should be aware of.
Run `python3 scripts/re_sim.py <config.json>` to generate a full funding forecast.
Run the included scripts only from the reviewed skill directory, avoid elevated privileges, and inspect any config file before using it.
The marketplace metadata may understate that Python is needed to use the scripts.
The skill itself declares a python3 runtime need, while the registry requirements supplied for review list no required binaries. This under-declaration is minor because the scripts are included and the use of Python is disclosed.
"openclaw": { "requires": { "bins": ["python3"] } }Confirm Python is available and review the included scripts before running them.
Investor reports or links could expose private contribution, ownership, or payment data if shared too broadly.
The skill contemplates sharing generated investor views or reports. No sharing server or external transmission is implemented in the artifacts, but the generated content can contain sensitive investor/payment information.
Use the simulation output to generate static reports for participants.
Review and redact generated reports before sharing, and ensure any external dashboard or link system has appropriate access controls.