Global Citizen: 全球身份规划
v1.0.0Overseas identity planning advisor — golden visas, CBI passports, digital nomad visas, residency-by-investment, and tax optimization. This skill should be us...
⭐ 0· 40·0 current·0 all-time
byJZS@pandabro666
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (overseas identity planning) matches the skill contents: a methodology, templates, and references for evaluating visas/CBI/golden visas. There are no unexpected binaries, env vars, or config paths requested — nothing here suggests it needs access to unrelated services (cloud credentials, system files, etc.).
Instruction Scope
SKILL.md is explicit about being a 'methodology engine' and mandates live web searches to verify prices/policies against official government sources — this is coherent with the purpose. It also instructs the agent to gather personal profile data (budget, nationality, family, etc.) which is necessary for advice; however, the instructions do not and should not prompt collection of highly sensitive secrets (raw bank credentials, passport scans, private keys). Recommend the implementer/agent avoid requesting or storing sensitive documents unless the user explicitly consents and the workflow justifies it.
Install Mechanism
No install spec and no code files — the skill is instruction-only. That minimizes on-disk execution risk. README suggests optional install via git/npx for local placement, but those are user-side instructions (not automated installers in the skill bundle).
Credentials
The skill requests no environment variables, no credentials, and no config paths. The reference files are structural guidance only and explicitly instruct real-time verification against government sites. There is therefore no disproportionate credential access.
Persistence & Privilege
always is false (no force-inclusion) and model invocation is not disabled (normal default). The skill does not request persistent system modifications or other skills' configs. Autonomous invocation is possible (platform default) but not unusual or excessive here.
Assessment
This skill appears coherent and low-risk as an advisory framework — it contains templates, destination summaries, and a mandatory 'real-time verification' step to query official government websites. Before installing/use: (1) confirm the skill source/trust since the registry metadata shows 'unknown' and README mentions a GitHub repo URL pattern — prefer published/verified sources; (2) the agent will ask for personal profile data (budget, nationality, family) needed for analysis — do not provide highly sensitive credentials (bank account passwords, private keys). If you must share documents (financial proofs, passport scans) do so only after explicit consent and preferably via secure, human-reviewed channels; the skill itself gives no mechanism for secure storage or escrow; (3) treat any legal/tax recommendations as informational and consult a licensed lawyer/tax advisor before taking action; and (4) when the skill recommends agencies/brokers, follow the broker-red-flags checklist included in the references (demand written fee breakdown, staged payments, government-source verification).Like a lobster shell, security has layers — review code before you run it.
digital-nomadvk970vkf4hmt0fxf1ytw3ner37584vg0dimmigrationvk970vkf4hmt0fxf1ytw3ner37584vg0dlatestvk970vkf4hmt0fxf1ytw3ner37584vg0dvisavk970vkf4hmt0fxf1ytw3ner37584vg0d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.