Back to skill
Skillv1.0.0
ClawScan security
Florida · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 7, 2026, 11:06 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's files, instructions, and required access are coherent with its stated purpose (Florida guidance); it is instruction-only, requests only an optional local config directory for user-approved memory, and asks for confirmation before writing.
- Guidance
- This skill appears coherent and low-risk: it is an instruction-only Florida guidance pack that may create a small optional memory file at ~/florida/memory.md only after asking you. Before installing or enabling persistent memory, check that you are comfortable with plain-text notes being stored in your home directory and review memory-template.md so you know what will be saved. Do not provide sensitive identifiers (SSNs, full payment details) to be stored; the skill itself says not to save those. Because the skill is instruction-only, there is no external code being downloaded or secrets requested. If you want extra caution, keep the skill stateless (deny creation of ~/florida/) and only use it for one-off queries.
Review Dimensions
- Purpose & Capability
- okName and description (Florida living, moving, storms, travel) match the included content files and runtime instructions. There are no unrelated binaries or credentials requested; the single declared resource (~/florida/) is consistent with the stated memory/continuity feature.
- Instruction Scope
- noteSKILL.md instructs the agent to operate statelessly by default and only create ~/florida/memory.md after explaining the plan and asking for explicit user confirmation. That behavior is within scope, but it does entail writing to the user's home directory when consent is given—users should be aware of what will be stored and review memory-template.md.
- Install Mechanism
- okNo install spec and no code files; this is instruction-only, so nothing is downloaded or written by an automated installer. Lowest-risk install profile.
- Credentials
- okThe skill requests no environment variables or external credentials. The only resource required is a local config path (~/florida/) used for optional memory, which is proportionate to the feature described.
- Persistence & Privilege
- noteThe skill can persist a single memory file under ~/florida/ but explicitly requires user confirmation before creating files and forbids storing sensitive identifiers by default. It is not always-enabled and does not request elevated system privileges. Users should confirm the content and location of saved memory before consenting.