Expat Companion
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: expat Version: 1.0.0 The OpenClaw skill 'Expat Companion' is designed for local data management related to international moves. All instructions across `SKILL.md`, `countries.md`, `memory-template.md`, and `setup.md` consistently direct the AI agent to store and retrieve information exclusively within the `~/expat/` directory. The `SKILL.md` file explicitly states that the skill 'does NOT access files outside ~/expat/' and 'does NOT share any information externally,' and no evidence of external network calls, unauthorized file access, or malicious execution commands was found in any of the analyzed files. The instructions for the agent are aligned with the stated purpose and do not contain any prompt injection attempts for harmful actions.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Someone with access to the device could learn private details about the user's move, documents, deadlines, and personal circumstances.
The skill intentionally creates persistent local files containing relocation plans, visa status, family/logistics details, concerns, reminder preferences, and document status.
After the conversation, create `~/expat/memory.md` with: - Move status and phase - Origin and destination countries - Target timeline and key dates - Visa status and type - Family/logistics situation - Their main concerns - Reminder preferences Also create `~/expat/documents.md` if they mentioned any document status.
Users should review what is saved in ~/expat/, avoid storing unnecessary document identifiers or exact locations, and delete or protect the files when no longer needed.
Users might not realize that their relocation information is being written to persistent local files unless they ask or inspect the skill instructions.
The skill tells the agent not to foreground storage details unless asked, even though it stores sensitive planning and document-tracking information locally.
If they ask where data is stored, tell them (`~/expat/`). Otherwise, keep the conversation about their move, not about files.
The skill should proactively tell users that it stores data in ~/expat/ and ask before saving especially sensitive document or personal details.