DHgate
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only DHgate assistant is coherent and scoped, with the main thing to notice being optional local notes saved under ~/dhgate/.
This looks safe to install as an instruction-only sourcing helper. Before letting it write files, confirm what will be stored in ~/dhgate/ and keep sensitive items such as card details, identity documents, tax IDs, and unrelated personal information out of those notes.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The assistant may remember DHgate-related shopping and order context across sessions if you approve local file writes.
The skill uses persistent local notes that can include buying profile, shortlisted sellers, tracking notes, and dispute planning. This is disclosed, scoped, and requires confirmation, so it is a notice rather than a concern.
Local working notes live in `~/dhgate/`. Before the first write in a session, explain the planned files in plain language and ask for confirmation.
Approve the local memory only if you want that persistence, and avoid saving payment credentials, identity documents, tax records, or unrelated personal data.