Back to skill
Skillv1.0.0
ClawScan security
Ibiza · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 4, 2026, 7:53 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only travel guide for Ibiza whose files and runtime instructions are consistent with its stated purpose and request no unexpected permissions or installs.
- Guidance
- This is a cohesive, instruction-only travel skill that appears to be what it claims: an Ibiza guide. Before relying on it for bookings, visas, taxes, or legal decisions, verify the cited official sources (links/dates) because regulations and prices change. Because it’s instruction-only, it does not request credentials or install code — lower technical risk — but treat its legal/tax/visa guidance as advisory and consult official authorities or a lawyer for critical decisions.
Review Dimensions
- Purpose & Capability
- okName and description match the delivered content: many topical markdown files (zones, visas, housing, transport, food, health, nomad guidance). The skill requests no binaries, env vars, or credentials that would be unrelated to a travel guide.
- Instruction Scope
- okSKILL.md instructs the agent to use the provided markdown files, cite sources, and date-stamp current data snapshots. It does not direct the agent to read system files, access external secrets, or post data to unexpected endpoints. Guidance is focused on island planning and legal/practical context.
- Install Mechanism
- okNo install spec and no code files — instruction-only. Nothing is written to disk and there are no external installers or downloads to evaluate.
- Credentials
- okThe skill declares no required environment variables, no credentials, and no config paths. The content references public web sources and official links typical for travel guidance; no secret access is requested.
- Persistence & Privilege
- okFlags: always:false, user-invocable:true, disable-model-invocation:false (normal). The skill does not request persistent or elevated privileges and does not modify other skills or system settings.