China Tour

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your attraction questions and lightweight travel preferences could be processed by a backend service if one is configured.

Why it was flagged

The skill discloses a backend API path for answering user questions, so user tour queries and preferences may be sent to whatever backend URL is configured.

Skill content
ChinaTour connects to a backend API for enhanced AI-powered responses
Recommendation

Use only a backend endpoint you trust, and avoid sharing sensitive personal information in tour questions.

What this means

A user might assume the skill never uses a backend, even though the main skill documentation describes optional API-backed responses.

Why it was flagged

The README’s 'fully offline' wording is somewhat broader than the SKILL.md API-first enhancement/fallback description, which could affect user expectations about network use.

Skill content
ChinaTour is a fully offline AI-powered smart tour guide
Recommendation

Treat it as offline-capable rather than strictly offline, and verify whether your OpenClaw setup enables the backend API.

What this means

Installing manually from GitHub means you rely on that repository’s contents rather than only the registry package.

Why it was flagged

The README offers an optional manual installation path from a GitHub repository, which is user-directed but depends on trusting that external source.

Skill content
git clone https://github.com/bitzhuyong/china-tour.git
Recommendation

Prefer the ClawHub install path or review the repository contents before manually copying it into your skills directory.