Back to skill
Skillv1.0.0
ClawScan security
Travel Anxiety Management Framework · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 21, 2026, 3:02 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is internally consistent with its stated purpose: a purely descriptive travel-anxiety guidance skill with no network access, no credential requests, and a small local handler that returns JSON.
- Guidance
- This skill appears to do what it says: a small, local handler that generates travel-anxiety planning JSON and includes tests. It does not request credentials or perform network calls. Before installing, consider: (1) review the handler.py if you want to verify output formatting or adjust recommendation wording, (2) be aware the advice is informational only and not professional guidance, and (3) the SKILL.md has a minor doc mismatch ('JS' vs JSON) but that's a documentation issue rather than a security concern.
Review Dimensions
- Purpose & Capability
- okName, description, SKILL.md, handler.py, and tests all align: the skill provides travel-anxiety frameworks and returns structured JSON. Minor documentation wording inconsistency (Technical Details mentions 'Returns valid JS' while handler returns JSON) but this does not affect the security posture.
- Instruction Scope
- okSKILL.md explicitly states this is descriptive only, with no code execution or external API calls. The handler implements only local string analysis and JSON output and does not read files, environment variables, or make network requests.
- Install Mechanism
- okNo install spec (instruction-only with a small handler file). Nothing is downloaded or extracted; no potentially risky install mechanism present.
- Credentials
- okRequires no environment variables, credentials, or config paths. The skill requests no secrets and the code does not access environment or external services.
- Persistence & Privilege
- okalways is false and the skill is user-invocable. It does not request persistent/privileged presence or modify other skills or system configuration.