Taxi

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only taxi assistant is coherent and purpose-aligned, but it handles sensitive travel memory and logged-in ride-hailing workflows that users should supervise.

This skill appears safe to use as an instruction-only taxi helper, but treat its local memory as sensitive. Review what is saved in ~/taxi, avoid storing card numbers or credentials, confirm pickup/dropoff and fare before booking, and personally approve any trip sharing, complaint submission, public post, payment, or ride request.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may fill forms and navigate booking pages, so incorrect pickup, destination, vehicle, or promo choices could matter if the user does not review them.

Why it was flagged

The skill directs browser-assisted actions on ride-booking sites, but it also states the user must make the final confirmation.

Skill content
Browser-Assisted (agent drives, user confirms) ... Fill pickup and destination ... Select vehicle type ... Apply promo code ... User clicks final confirm
Recommendation

Keep the final booking click manual, review all trip details and fare estimates, and do not allow automated submission of payment or ride requests.

What this means

The agent may see or use account profile, trip, fare, and payment-option context while preparing a booking.

Why it was flagged

The workflow may occur inside logged-in Uber, Lyft, Bolt, or similar accounts and can reach a payment/request step, although the user confirmation boundary is disclosed.

Skill content
Sign in ... Enter pickup address ... Enter destination ... Check fare estimate ... Apply promo code if available ... USER CONFIRMS
Recommendation

Do not share passwords, PINs, or verification codes with the agent; sign in yourself when needed and confirm the final ride, payment method, and fare personally.

What this means

These files can reveal sensitive location history, home/work addresses, travel habits, business expenses, and account identifiers if accessed by others or reused incorrectly.

Why it was flagged

The skill intentionally keeps persistent local memory containing addresses, trip history, expenses, and account-related preferences.

Skill content
Memory lives in `~/taxi/` ... `memory.md` # Preferences, saved addresses ... `trips.md` # Trip history and expenses ... `accounts.md` # Which apps user has
Recommendation

Store only what is necessary, avoid full payment details or passwords, mask home addresses if desired, review saved locations before booking, and delete or protect the ~/taxi files when no longer needed.