Travel Itinerary Planner by Chaceclaw

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may rely on fictional or stale weather and safety guidance when making travel plans.

Why it was flagged

The implementation describes weather forecasts as simulated data, while the skill advertises real-time weather updates and UV/safety advice. This mismatch can cause users to over-trust non-live travel information.

Skill content
获取天气预报(模拟数据,实际应用中应调用天气API)
Recommendation

Clearly label weather and safety data as simulated unless a real, cited data source is used; include timestamps and advise users to verify critical travel conditions.

What this means

The skill may remain available or influential across sessions after installation.

Why it was flagged

The install instructions ask the user to register the skill in persistent agent memory, meaning the skill's instructions may affect future sessions until removed.

Skill content
4. 注册技能到 `memory.md`
Recommendation

Review the memory.md entry before adding it, and remove it when you no longer want this skill to be active.

What this means

Shared itineraries may reveal destinations, dates, budgets, family travel details, or other private trip information.

Why it was flagged

The skill advertises itinerary sharing and social media sharing, but the visible documentation does not specify where share links are hosted or what privacy controls apply.

Skill content
行程分享功能
- 📤 生成分享链接
- 📄 导出PDF/Markdown
- 📱 社交媒体分享
Recommendation

Use sharing features only after checking exactly what will be shared and with whom; avoid sharing private travel dates or family details publicly.