Back to skill
Skillv1.0.0
ClawScan security
United Kingdom · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 4:12 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is a coherent instruction-only UK trip‑planning skill that only asks to store trip memory under ~/uk/ and its files and instructions match the travel‑planning purpose.
- Guidance
- This skill appears internally consistent and only needs a local ~/uk/ folder to save trip memory. Before installing: (1) Confirm you are comfortable with the skill writing trip notes to ~/uk/memory.md (avoid storing very sensitive data such as passport numbers or full copies of IDs in that file). (2) Note the skill's source is unknown — review the provided files (they are plain travel guidance) and the homepage if you want provenance. (3) Although the SKILL.md states it will not make network requests, that is an instruction, not a technical enforcement; rely on your platform's permission controls if you require stricter guarantees. If those points are acceptable, the skill is coherent with its stated purpose.
Review Dimensions
- Purpose & Capability
- okName, description, and shipped content are travel planning materials (entry rules, itineraries, region playbooks). The only runtime requirement is a local config path (~/uk/) to store trip memory — reasonable and proportionate for a planning skill. No unrelated credentials or binaries are requested.
- Instruction Scope
- okSKILL.md and the topic files instruct only on planning behavior and on creating/using ~/uk/memory.md. They do not instruct the agent to read other system files, access environment secrets, or call external endpoints. The skill explicitly declares it will not access files outside ~/uk/ or make network requests.
- Install Mechanism
- okNo install spec and no code files — this is instruction-only. That is the lowest install risk: nothing is downloaded or written by an installer beyond the user-created ~/uk/ folder.
- Credentials
- okNo environment variables or credentials are required. The single declared resource is a config path (~/uk/) used to store trip memory; that is proportional to the stated purpose.
- Persistence & Privilege
- okSkill is not always-enabled, is user-invocable, and allows normal autonomous invocation. It only asks to persist its own memory under ~/uk/ and does not request system-wide privileges or changes to other skills.