Back to skill
Skillv1.0.0
ClawScan security
Argentina · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 10:42 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only Argentina travel planner that only asks to store/read a local memory directory (~/argentina/) and its internal guidance files — its declared requirements and behavior are coherent with its stated purpose.
- Guidance
- This skill appears internally consistent and low-risk: it only uses local files in ~/argentina/ and provides travel guidance. Before installing, confirm your agent/runtime actually enforces the skill's 'no external network access' promise if that matters to you — the SKILL.md is an instruction sheet, not an enforcement mechanism. Avoid storing highly sensitive personal data (passport numbers, full passport scans, unencrypted payment credentials) in ~/argentina/memory.md. If you want the agent to make reservations or payments, use dedicated booking/payment skills that require explicit credentials and explicit user consent. Finally, rely on the listed official sources for legal/visa questions rather than only the guidance text before purchasing non‑refundable travel products.
Review Dimensions
- Purpose & Capability
- okName/description (Argentina trip planning) align with requested resources: a local config path (~/argentina/) and only local guidance files. No unrelated environment variables, binaries, or external credentials are requested.
- Instruction Scope
- noteRuntime instructions are limited to reading/updating ~/argentina/memory.md and using the included content files. The SKILL.md explicitly states it will not access files outside ~/argentina/ or make network requests — this is coherent, but enforcement depends on the agent/runtime platform (the instructions themselves do not technically prevent other platform capabilities).
- Install Mechanism
- okNo install spec or code to download/execute was provided; this is an instruction-only skill (lowest install risk).
- Credentials
- okThe skill requests no credentials or environment variables. The single required config path (~/argentina/) is proportionate for storing trip memory and local notes.
- Persistence & Privilege
- okalways:false and no elevated privileges requested. The skill stores memory in its own directory only and does not claim to modify other skills or system-wide settings.