Back to skill
Skillv1.0.0
ClawScan security
Atlas Travel Extras · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 8, 2026, 3:15 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- An instruction-only travel-planning skill that creates and reads markdown templates under ~/atlas-travel-extras — coherent with its description, though it overstates 'automatic alerts' without providing an integration or scheduler.
- Guidance
- This skill is essentially a collection of local markdown templates and instructions that read/write files under ~/atlas-travel-extras. It appears coherent and does not request credentials or install code, but keep in mind: - Reminders are described as "automatic" but the skill provides no scheduler or external integration — you will likely need to run the agent or set up a scheduler yourself for notifications. - Files under ~/atlas-travel-extras may contain sensitive personal data (passport numbers, insurance, credit-card notes). Avoid storing unencrypted secrets in these markdown files; prefer redaction or secure storage for highly sensitive items. - If you expect the skill to book flights, check hotels, or fetch live weather, note it has no API integrations — it offers templates and guidance, not automatic bookings or web calls. - Confirm the agent runtime has only the filesystem permissions you intend (it will create/read files in your home directory). On shared systems, restrict access or store data in a private location. Install only if you accept that this is a local, template-driven assistant and you understand how reminders/automation will be handled in your environment.
Review Dimensions
- Purpose & Capability
- noteThe name/description (travel planning, checklists, reminders) matches the delivered content: many templates and file-based workflows. However the feature list claims "Automatic alerts"/reminders and includes triggers like "book flight"/"weather" without any install, API keys, or instructions for scheduling or external integrations — this is an overclaim vs. what the skill actually implements (file templates and manual checks).
- Instruction Scope
- okSKILL.md instructs the agent to create/read/write files only under ~/atlas-travel-extras (wishlist/, trips/, documents/, templates/) and to copy reference templates into trip folders. There are no instructions to read arbitrary system files, environment variables, or to send data to external endpoints. Note: those local files may contain sensitive personal data (passports, insurance, etc.).
- Install Mechanism
- okNo install spec or code is included (instruction-only). Nothing is downloaded or written by an installer, lowering disk/execution risk.
- Credentials
- okThe skill requires no environment variables, credentials, or external config paths. The requested footprint (local markdown files) is proportionate to a travel-planning/template skill.
- Persistence & Privilege
- okalways:false and no system-wide modifications are requested. The skill will operate on files in its own ~/atlas-travel-extras directory; it does not request elevated or persistent platform privileges.