✓
Purpose & Capability
The name/description claim to be an alias for raon-os and the package only contains an SKILL.md and minimal package.json saying the same — there are no extra env vars, binaries, or unrelated requirements.
✓
Instruction Scope
SKILL.md only instructs the agent to install raon-os via 'clawhub install raon-os' and points to the raon-os ClawHub page; it does not ask the agent to read local files, access unrelated environment variables, or transmit data elsewhere.
✓
Install Mechanism
There is no install specification in this package (instruction-only). Nothing is downloaded or written by this alias itself.
✓
Credentials
The alias declares no required environment variables, credentials, or config paths — nothing disproportionate is requested by this package.
✓
Persistence & Privilege
No elevated persistence is requested (always is false) and the alias does not attempt to modify other skills or global agent settings.
Assessment
This package is merely an alias that directs you to install the raon-os skill. The real security surface is raon-os — before installing it, review raon-os's SKILL.md and install spec for any requested API keys, credentials, downloaded binaries, or scripts that run on install. Pay special attention to integrations mentioned (Kakao, funding portals, RAG pipelines) because they may legitimately require API tokens or access to user data. If you want to be cautious: inspect the raon-os source/installation URLs, verify the publisher, and only provide credentials scoped to the service and environment you trust.
