Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
United States
v1.0.0Plan United States trips with region-specific routing, verified entry rules, transport logistics, and practical tourist safety.
⭐ 0· 336·0 current·0 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided content files (region playbooks, entry rules, itineraries). The only declared config path is ~/united-states/, which is appropriate for storing trip memory and is consistent with the skill's stated purpose. No unrelated binaries or credentials are requested.
Instruction Scope
Runtime instructions ask the agent to create and use ~/united-states/memory.md, read that file 'silently' when present, and to consult the included markdown playbooks. This stays within the skill's stated domain, but the 'read it silently' behavior means the skill will reuse local memory without explicit user-visible prompts; users should be aware local memory might contain sensitive trip data (visa status, dates, IDs). The SKILL.md also asserts it will not make network requests — that is an instruction but not technically enforced by this static package (platform/runtime enforcement is needed).
Install Mechanism
No install spec and no code files — instruction-only skill. This is the lowest-risk install mechanism because nothing is downloaded or executed. The skill suggests installing related skills via clawhub only if the user confirms, which is appropriate and opt-in.
Credentials
The skill requests no environment variables or credentials. The only resource it declares is a config path in the user's home directory (~/united-states/), which is proportional to storing trip memory. There are no unexplained tokens, keys, or external endpoints requested by the package.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. It persists only to its own config path (~/united-states/) and does not attempt to modify other skills or global agent settings. Writing a local memory file is normal for a planning skill.
Assessment
This skill appears coherent and self-contained, but review these practical points before installing: 1) The skill writes and reads a local memory file at ~/united-states/memory.md — avoid storing highly sensitive data (full passport numbers, raw copies of visas, full payment credentials) in that file. 2) The SKILL.md asserts it will not access files outside ~/united-states/ or make network calls, but that is an instruction; confirm your agent/runtime enforces those policies if you require strict privacy. 3) The agent will 'read it silently' when the memory file exists — understand that previously stored preferences and statuses will be used automatically unless you clear or inspect the file. 4) Related-skills installs (clawhub install ...) are opt-in; do not install additional skills unless you trust their source. If you want extra assurance, open and inspect ~/united-states/memory.md after initialization and remove any sensitive tokens before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk9772bpn6w7fk85tedq15tqrcd8257nx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🇺🇸 Clawdis
OSLinux · macOS · Windows
Config~/united-states/