Back to skill
Skillv1.0.0
ClawScan security
Digital Nomad · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 3, 2026, 6:12 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an instruction-only informational skill about the digital-nomad lifestyle with no code, no installs, and no requests for credentials — its requirements and behavior match its stated purpose.
- Guidance
- This skill appears to be a static, read-only informational guide about digital nomads and is internally consistent. Before relying on visa, tax, or budget figures: verify details with official government sites or a tax professional since rules change often. Also avoid pasting sensitive personal or financial data into any chat — the skill does not need credentials to operate. If you want real-time or personalized immigration/tax advice, prefer official or licensed services rather than an informational skill.
Review Dimensions
- Purpose & Capability
- okThe name and description match the SKILL.md content: the skill is purely informational about digital-nomad topics (skills, destinations, visas, taxes, tools). It does not declare or require any unrelated capabilities, binaries, or credentials.
- Instruction Scope
- okThe SKILL.md contains only content to present to users (definitions, lists, tables, recommendations). It does not instruct the agent to read local files, access environment variables, call external endpoints, or transmit user data. There is no scope creep.
- Install Mechanism
- okNo install spec and no code files are present (instruction-only). Nothing will be downloaded or written to disk during install — minimal risk from installation.
- Credentials
- okThe skill declares no environment variables, credentials, or config paths. There are no requests for secrets or unrelated tokens; requested access is proportional (none).
- Persistence & Privilege
- okalways is false and there is no indication the skill modifies agent configuration or demands persistent elevation. The default ability for autonomous invocation is set to platform defaults and does not change the assessment.
