ClawHub

GlobePilot AI Agent V1

v1.0.1

AI-powered travel assistant offering visa info, currency conversion, airport status, local events, cultural tips, emergency contacts, travel timing, accommod...

⭐ 1· 1.5k·0 current·0 all-time
by@sarqovik
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The SKILL.md and .meta.json describe a travel assistant (visa, currency, airport, events, recommendations) and the listed commands align with that purpose. Minor inconsistencies: top-level package metadata in this submission lacked a human-readable description (SKILL.md provides it) and .meta.json shows version 1.0.0 while registry metadata lists 1.0.1. The doc also mentions Teneo Protocol, a monetization/sdk ecosystem and supported blockchains (Base, Peaq, Avalanche) that are not required to use the simple travel commands — this is unusual but not clearly malicious.
ℹ
Instruction Scope
SKILL.md is high-level and defines available commands, but does not specify runtime data sources, APIs, or how information (visas, airport status, weather) will be retrieved. The instructions do not tell the agent to read local files or environment variables. Because data retrieval is unspecified, the agent may make external network requests at runtime or ask the user for API keys — the scope is somewhat vague but not overtly dangerous.
✓
Install Mechanism
No install specification and no code files — instruction-only. This minimizes on-disk risk; nothing is downloaded or installed by the skill itself.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. Although SKILL.md references a monetization SDK and blockchain networks, it does not request any keys or secrets, so requested environment access is proportionate to the stated functionality.
✓
Persistence & Privilege
always is false and the skill does not request persistent presence or system-wide configuration changes. It does not claim to modify other skills or store credentials.
Assessment
This skill appears to be a coherent travel assistant and poses low static risk because it is instruction-only and requests no credentials. Before installing or using it, consider: (1) ask the publisher which APIs or web services the agent will call for visa/airport/weather data and whether any keys are needed; (2) never paste secrets (API keys, wallet private keys) into prompts — the SKILL.md mentions blockchain monetization but does not explain how credentials would be handled; (3) verify external links (agent-console.ai, GitHub) and the publisher identity if you plan to use monetization features; and (4) because data sources are unspecified, expect the agent to perform network requests during runtime — if your environment restricts outbound network access, enforce those policies.

Like a lobster shell, security has layers — review code before you run it.

airport-statusvk976992a8cmfq2jbse3ypfypsn80kv9fculturevk976992a8cmfq2jbse3ypfypsn80kv9feventsvk976992a8cmfq2jbse3ypfypsn80kv9ffood-guidevk976992a8cmfq2jbse3ypfypsn80kv9flatestvk97d6thbs1ycm8t5rg1ytn7wv180kyxvreal-time-datavk976992a8cmfq2jbse3ypfypsn80kv9fteneovk976992a8cmfq2jbse3ypfypsn80kv9ftravel-aivk976992a8cmfq2jbse3ypfypsn80kv9fvisa-checkervk976992a8cmfq2jbse3ypfypsn80kv9f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments