Back to skill
Skillv1.0.0
ClawScan security
Denmark · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 12:04 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only Denmark travel-planning skill that is internally consistent: it only reads/writes a local ~/denmark/ memory file, declares no credentials or installs, and its files are travel guidance and source links.
- Guidance
- This skill appears coherent and low-risk: it only stores trip context under ~/denmark/ and uses local markdown playbooks and public source links. Before installing, (1) confirm your platform enforces the SKILL.md promise (that the skill makes no network calls)—an instruction cannot by itself prevent network I/O if the agent/platform allows it; (2) avoid putting sensitive personal data (full passport numbers, payment card numbers, or copies of identity documents) into ~/denmark/memory.md because that file will be read and written by the skill; and (3) verify the listed external source links if you need the most up-to-date official rules (entry/ETIAS/EES and ferry booking details can change). If you want stricter guarantees, check platform-level permissions for skills (network, file-system access) before enabling persistent memory for this skill.
Review Dimensions
- Purpose & Capability
- okName/description match the requested artifacts: all required files are travel playbooks and the only declared config path (~/denmark/) is appropriate for storing trip memory and notes. There are no unrelated binaries, env vars, or credentials requested.
- Instruction Scope
- okSKILL.md instructs only local actions (create and read ~/denmark/memory.md, use the provided markdown playbooks). It explicitly states it will not access files outside ~/denmark/ or make network requests, and the runtime instructions do not request any other system or network access.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill. Nothing will be downloaded or written by an installer; lowest-risk install footprint.
- Credentials
- okNo environment variables or credentials are required. The single config-path requirement (~/denmark/) is proportionate for durable trip memory storage.
- Persistence & Privilege
- okalways is false and the skill only asks to persist a single memory file in the user's home directory. That is reasonable for a planning skill; it does not request system-wide or other skills' config changes.