Room
PassAudited by ClawScan on May 1, 2026.
Overview
Room appears to be a benign local room-management CLI; the main things to notice are its persistent local logs/exports and an unclear install mapping for the bundled script.
This skill looks appropriate for offline room and maintenance tracking. Before installing, verify that the `room` command points to the expected script, and remember that entries and exports are saved locally in plain files under `~/.local/share/room`.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You may need to confirm that the `room` command you run is the expected Room script from this package.
The package includes a shell script and the documentation assumes a `room` CLI, but the registry does not describe how that command is installed or mapped. This is a provenance/install clarity note, not evidence of hidden execution.
No install spec — this is an instruction-only skill. Code file presence: scripts/script.sh (10971 bytes).
Install only from the declared source and verify the local executable path before relying on the command.
Anyone with access to your local account or exported files could read the room inventory, schedules, costs, and maintenance history you store there.
The skill intentionally keeps persistent local records and exports of room inventory, costs, maintenance, reminders, and related activity. This is purpose-aligned, but it can contain private household information.
All data is stored locally at `~/.local/share/room/`. Each action is logged with timestamps. Use `export` to back up your data anytime.
Avoid storing secrets, keep the data directory and exports protected, and review exported files before sharing them.
