Expat Companion
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Someone with access to the device could learn private details about the user's move, documents, deadlines, and personal circumstances.
The skill intentionally creates persistent local files containing relocation plans, visa status, family/logistics details, concerns, reminder preferences, and document status.
After the conversation, create `~/expat/memory.md` with: - Move status and phase - Origin and destination countries - Target timeline and key dates - Visa status and type - Family/logistics situation - Their main concerns - Reminder preferences Also create `~/expat/documents.md` if they mentioned any document status.
Users should review what is saved in ~/expat/, avoid storing unnecessary document identifiers or exact locations, and delete or protect the files when no longer needed.
Users might not realize that their relocation information is being written to persistent local files unless they ask or inspect the skill instructions.
The skill tells the agent not to foreground storage details unless asked, even though it stores sensitive planning and document-tracking information locally.
If they ask where data is stored, tell them (`~/expat/`). Otherwise, keep the conversation about their move, not about files.
The skill should proactively tell users that it stores data in ~/expat/ and ask before saving especially sensitive document or personal details.