Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Portugal
v1.0.0Discover Portugal like a local with specific restaurants, hidden gems, wine regions, and tips beyond the tourist traps.
⭐ 0· 380·0 current·0 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description (Portugal travel guide) aligns with the declared assets: a set of markdown guides and a memory path ~/portugal/. Requesting a config path for storing trip memory is proportionate to the purpose.
Instruction Scope
SKILL.md instructs the agent to use files in ~/portugal/ and to consult setup.md/memory-template.md. The visible content across the provided markdown files is purely travel content (no commands, credentials, or network endpoints). However, a subset of files was omitted from the paste (12 files), and setup.md content was not shown in-line here — review those omitted files (especially setup.md) before install to confirm they don't contain instructions to read other system paths or to make network calls.
Install Mechanism
No install spec and no code files — instruction-only skill. That minimizes disk-write and code-execution risk.
Credentials
The skill requires no environment variables or external credentials. It declares a single config path (~/portugal/) for local memory, which is reasonable for a travel-memory feature.
Persistence & Privilege
always:false and default invocation settings. The skill stores data only in its declared folder (per SKILL.md). Nothing requests system-wide or other-skills configuration changes.
Assessment
This skill appears to be a local travel guide that keeps its trip memory in ~/portugal/ and otherwise contains static guidance. Before installing: 1) Inspect setup.md (and any of the 12 omitted files) to confirm there are no hidden instructions that read other system files or perform network requests. 2) Be aware the skill will write/keep trip context in ~/portugal/ — don't store sensitive credentials or private data there. 3) If you prefer to prevent any autonomous actions, keep the skill user-invocable only or disable autonomous invocation at the agent level. 4) 'clawhub install' and 'clawhub sync' references imply network tools outside the skill; those are optional helpers and are not required by the skill itself.Like a lobster shell, security has layers — review code before you run it.
latestvk97cs53yy9crzh6hy11tsx986x81xngq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🇵🇹 Clawdis
OSLinux · macOS · Windows
Config~/portugal/