Luma Events

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less external context for who maintains the skill or where updates originate.

Why it was flagged

The registry entry provides limited external provenance for the skill, although the supplied files do not show remote installers, hidden dependencies, or obfuscated code.

Skill content
Source: unknown
Homepage: none
Recommendation

Review the included files before installation and re-review future updates, especially because the source and homepage are not provided.

What this means

Your queried cities or event interests may remain in a local memory file and influence later answers.

Why it was flagged

The skill intentionally creates persistent local memory from fetched event data. The path and retention are disclosed, but persisted event data can reflect cities or events the user asked about and may be reused later.

Skill content
Always save fetched events to `~/clawd/memory/luma-events.json` for future reference. ... Keep events for next 60 days only
Recommendation

Use the skill only if this local retention is acceptable; inspect or delete ~/clawd/memory/luma-events.json if you do not want those event records kept.