Madeira
v1.0.0Navigate Madeira as visitor, digital nomad, or resident with neighborhoods, levadas, costs, visas, and local insights for the Atlantic island.
⭐ 0· 373·0 current·0 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided materials: dozens of Markdown pages about visiting, living, and working in Madeira. The skill declares no binaries, env vars, or credentials — appropriate for a read-only informational skill.
Instruction Scope
SKILL.md contains rules for choosing and loading relevant auxiliary files and provides in-skill 'current data' summaries. It does not instruct the agent to read system files, access credentials, or post to unexpected external endpoints. Note: the static scanner found 'unicode-control-chars' in SKILL.md (prompt-injection signal) — likely formatting/hidden characters rather than functional code, but worth manually checking the SKILL.md for hidden control characters before trusting automated invocation.
Install Mechanism
No install spec and no code files are present. This is instruction-only, so nothing is downloaded or written to disk at install time.
Credentials
The skill requires no environment variables, no credentials, and no config paths. That's proportionate for a travel/tourism content skill.
Persistence & Privilege
always:false and default invocation settings. The skill does not request persistent system-wide privileges or modify other skills. Autonomous invocation is allowed (platform default) but combined with no credentials and no install this is low-risk.
Scan Findings in Context
[unicode-control-chars] unexpected: The scanner detected hidden Unicode control characters in SKILL.md. For an informational travel skill this is not expected. This is likely non-malicious (formatting or copy/paste artifacts), but such characters can be used for prompt injection or to hide instructions — recommend a quick manual review of SKILL.md for unusual invisible characters before granting broad or autonomous use.
Assessment
This skill is a read-only travel guide and appears internally consistent with its stated purpose. It requests no credentials and installs nothing, so the technical risk is low. Before installing: (1) review the SKILL.md for any hidden/unusual control characters (the scanner flagged this), (2) prefer manual or user-invoked use rather than long-running autonomous runs if you plan to give the agent broad access, and (3) if the skill will be used in production or given automated invocation, test it in a sandboxed agent first to ensure it behaves as expected. If you don't trust the unknown source (owner ID / homepage), treat it like unverified content — safe to read, but avoid granting it access to secrets or critical workflows.Like a lobster shell, security has layers — review code before you run it.
latestvk97788s1ge0tvqf306wxpw809h81nkf8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌴 Clawdis
OSLinux · macOS · Windows