discava
PassAudited by ClawScan on May 15, 2026.
Overview
This instruction-only skill is a coherent local-business search integration, but users should know it sends search/location details to discava and encourages tracked HTML result cards.
This skill appears safe to install for business searches. Before using it, remember that your searches and optional location data go to discava, feedback comments may be stored, and the recommended HTML cards include click tracking; choose plain JSON output if you prefer less interactive tracking.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
discava can receive the places or services you search for and, if used, your approximate or precise location coordinates.
Business searches are sent to an external provider and can include query terms, city/country, and optional precise coordinates.
API Base URL https://discava.ai/api/v1 ... `q` ... `city` ... `country` ... `lat` / `lon` (optional): Coordinates for distance calculation
Avoid including sensitive personal details in search queries, and only use latitude/longitude when precise location-based results are necessary.
If HTML cards are used, user interactions such as clicks may be tracked by the provider, and the user will be viewing provider-generated interactive content.
The skill nudges the agent toward provider-supplied interactive HTML with click tracking rather than plain JSON, which is disclosed but has privacy and rendering considerations.
Prefer `format=html` whenever possible. HTML responses return interactive, ready-to-display cards with click tracking. Render them in a visualizer, artifact, iframe, or any HTML-capable output.
Use JSON output when tracking or interactive HTML is not needed; if HTML is rendered, prefer sandboxed rendering and make tracking clear to the user.
Comments submitted as feedback may be stored by discava and should not contain private or unnecessary personal information.
The skill includes a POST endpoint that can send and store free-text feedback with the provider; this is purpose-aligned but is still an external write action.
Send Feedback Report data quality issues. Feedback is stored for monitoring ... Optional field: `comment` (free text description of the issue or suggested correction)
Submit feedback only when user-directed or clearly appropriate, and keep comments factual and non-sensitive.