v1.0.0

Swiss Geo & Tourism Assistant

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 4:52 AM.

Analysis

This instruction-only Swiss geo/tourism skill appears benign: it makes read-only public map and weather lookups and does not request credentials, install code, persistence, or account-changing access.

GuidanceThis skill is reasonable to use for Swiss maps, tourism, weather, and geodata lookups. Be aware that search terms such as addresses or trip locations may be sent to public services like geo.admin.ch or wttr.in, and verify safety-critical weather, hazard, hiking, or travel information with official sources before relying on it.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown; Homepage: none

The registry metadata does not provide an upstream source or homepage. This is only a provenance note here because the skill has no install script or code files and the visible behavior is instruction-only.

User impactUsers have less external provenance information to verify who maintains the skill or where its instructions originated.

RecommendationReview the included instructions before use and prefer official data sources for important travel, hazard, or navigation decisions.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityInfoConfidenceHighStatusNote

SKILL.md

curl -s "https://api3.geo.admin.ch/rest/services/api/SearchServer?searchText=SUCHTEXT&type=locations&sr=4326"

The skill instructs use of a public external API with user-provided search text. This is expected for geodata lookup, but users should know that location/address queries leave the local chat context.

User impactPlace, address, coordinate, or weather lookup terms may be sent to public third-party or government services to produce results.

RecommendationUse the skill for ordinary public location queries; avoid entering sensitive private addresses or personal travel details unless you are comfortable sending them to the referenced services.