Back to skill
Skillv1.0.0
ClawScan security
Switzerland · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 4:52 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only Switzerland travel planner that only requests a small local config path for lightweight trip memory; its requirements and instructions are coherent with the stated purpose.
- Guidance
- This skill appears coherent and low-risk: it is instruction-only, asks for a small local folder (~/switzerland/) to store trip notes, and does not request credentials or install code. Before installing, you may want to: 1) confirm you are comfortable with the agent storing lightweight trip notes under ~/switzerland/ (avoid saving sensitive identifiers like passport numbers there); 2) review the skill homepage/owner if you want provenance (the registry owner ID is listed but source is 'unknown'); and 3) when prompted about activation preferences (setup.md), choose 'only when I ask' if you prefer not to have the skill trigger proactively. If you need absolute assurance about network behavior, open the truncated SKILL.md snippet in the registry or homepage to verify the skill’s full statement about network access.
Review Dimensions
- Purpose & Capability
- okName and description match the files and runtime instructions. All declared requirements (no env vars, no binaries, a single config path ~/switzerland/) are appropriate for a travel-planning skill that stores local trip memory.
- Instruction Scope
- okSKILL.md and module files limit actions to planning,/or asking questions, and storing compact trip memory under ~/switzerland/. Setup.md explicitly says to create local memory only when the user clearly wants ongoing planning. There are references to official web sources, but the instructions do not require reading system files outside the declared config path.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill. This minimizes disk writes and execution of third-party code.
- Credentials
- okNo credentials, no environment variables, and a single local config path. The requested access (~/switzerland/) is proportional to the purpose of saving local trip notes and memory.
- Persistence & Privilege
- okalways is false and model invocation is allowed (platform default). The skill requests only its own config path for lightweight persistence and does not ask to modify other skills or system-wide settings.