Shanghai
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a benign instruction-only Shanghai guide with no code, credentials, or hidden automation, though it includes optional ClawHub commands that should remain user-approved.
This skill looks safe as a reference guide. Treat its visa, legal, healthcare, and cost information as orientation and verify time-sensitive details with official or local sources. Approve optional related-skill installs, syncs, or stars only if you actually want those ClawHub actions.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If approved, the user may install additional skills or update/star through ClawHub, which can change the agent environment or registry state.
The skill suggests commands that can modify ClawHub state or installed skills, but they are plainly disclosed and the related-skill install is explicitly gated on user confirmation.
Install with `clawhub install <slug>` if user confirms ... If useful: `clawhub star shanghai` ... Stay updated: `clawhub sync`
Only run the optional ClawHub commands when the user explicitly wants that action, and review any related skill before installing it.