Back to skill
Skillv1.0.0
ClawScan security
Romania · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 11, 2026, 4:19 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is a self-contained, instruction-only Romania travel guide that only asks to read/write a local ~/romania/ folder for trip memory and does not request unrelated credentials or network access.
- Guidance
- This skill appears coherent and focused: it stores trip notes under ~/romania/ and otherwise claims not to access the network or other files. Before installing, confirm you are comfortable with local persistence (delete ~/romania/ to remove saved memory). If you later install any related skills (e.g., booking, travel, or food skills) review those skills separately — they may require network access or credentials. If you want strictly ephemeral advice, tell the skill not to save memory or do not allow it to create ~/romania/.
Review Dimensions
- Purpose & Capability
- okName/description (Romania trip planning) aligns with the included files and requested resources. All required resources are local documentation and a config path (~/romania/) used to store trip memory — appropriate for a travel planning skill.
- Instruction Scope
- okSKILL.md and other files instruct the agent to read/write only within ~/romania/, run a local setup flow, and use the provided topic files. There are no instructions to read unrelated system files, access secrets, or make network requests; that scope is explicit in the skill.
- Install Mechanism
- okInstruction-only skill with no install spec and no code to download or execute. This is the lowest-risk install model and matches the skill's purpose.
- Credentials
- okThe skill requires no environment variables, no credentials, and only a single config path under the user's home directory. That level of access is proportionate for a local trip-memory feature.
- Persistence & Privilege
- okalways is false and the skill stores memory only in ~/romania/. The README explains what is saved and when. This is a standard, limited persistence model appropriate for a travel planner.