Mortgage Kb Rag
v1.0.2Instant answers to mortgage, credit, and home-buying questions from a curated knowledge base. Ask anything about the buying process, credit repair, loan prog...
⭐ 0· 61·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and documented inputs/outputs align: the skill claims to perform retrieval-augmented answers for mortgage/home-buying queries and its SKILL.md describes search, retrieval, synthesis, and citation behavior — nothing requested (no env vars, no binaries) is out of scope for that purpose.
Instruction Scope
The SKILL.md clearly limits behavior to searching a curated knowledge base and returning cited answers with a knowledge_gap guard. However, it does not specify where or how the indexed knowledge base is stored/hosted or what mechanism the agent should use to access it (no config paths, no API endpoints, no storage details). That omission is an operational gap but not necessarily malicious — you should confirm where the KB lives and how queries are routed before trusting production use.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing will be written to disk during install. This is the lowest-risk model and matches the described behavior.
Credentials
The skill requests no environment variables, credentials, or config paths. For a retrieval Q&A skill this is proportionate — there is no unexplained request for secrets or system access.
Persistence & Privilege
always:false and default model-invocation behavior. The skill does not request permanent/privileged presence or modification of other skills. Autonomous invocation is allowed but is the platform default.
Assessment
This skill appears coherent and low-risk as an instruction-only RAG Q&A tool, but before installing you should: 1) Ask the publisher where the indexed knowledge base is hosted and how queries are routed (local index, platform-managed index, or external API). 2) Confirm data handling and retention policies — whether user queries (which may include personal financial details) are logged, stored, or sent to third parties. 3) Verify source citations and update cadence (the doc claims monthly updates and ~450 Q&As). 4) Test the skill with non-sensitive/sample queries to confirm accuracy and the 'knowledge_gap' behavior. 5) If you plan to use it for customer-facing advice, check regulatory/ liability implications for mortgage or lending guidance. If the publisher cannot explain where the KB lives or how queries are processed, treat that as a red flag and avoid installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97en88kg9gay87803ybf4qpmh83s2pa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.