China Tour
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a coherent travel-guide skill; the main things to notice are its optional backend API path and optional manual GitHub installation instructions.
This skill looks purpose-aligned for China scenic-spot guidance. Before installing, check whether you plan to use the backend API or only the local reference fallback, and prefer the registry install unless you have reviewed and trust the GitHub source.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your attraction questions and lightweight travel preferences could be processed by a backend service if one is configured.
The skill discloses a backend API path for answering user questions, so user tour queries and preferences may be sent to whatever backend URL is configured.
ChinaTour connects to a backend API for enhanced AI-powered responses
Use only a backend endpoint you trust, and avoid sharing sensitive personal information in tour questions.
A user might assume the skill never uses a backend, even though the main skill documentation describes optional API-backed responses.
The README’s 'fully offline' wording is somewhat broader than the SKILL.md API-first enhancement/fallback description, which could affect user expectations about network use.
ChinaTour is a fully offline AI-powered smart tour guide
Treat it as offline-capable rather than strictly offline, and verify whether your OpenClaw setup enables the backend API.
Installing manually from GitHub means you rely on that repository’s contents rather than only the registry package.
The README offers an optional manual installation path from a GitHub repository, which is user-directed but depends on trusting that external source.
git clone https://github.com/bitzhuyong/china-tour.git
Prefer the ClawHub install path or review the repository contents before manually copying it into your skills directory.