Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Startup Guide
v1.0.0창업/사업자 지원 스킬. 9개 인텐트 라우팅(Startup Checklist~Beginner Guide), 업종별 허가·신고 + 정책자금 + 사업자 등록 + 개인 vs 법인 비교. 트리거: "창업", "사업자 등록", "허가", "신고", "정책자금", "창업지원금", "개인사업자...
⭐ 0· 474·0 current·0 all-time
by김성우@sw326
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (창업/사업자 안내) match the content: intent routing, legal/tax/support lookups and delegation to company-info, tax-guide, law-search, korean-gov-programs, welfare-guide. It does not request unrelated credentials or binaries.
Instruction Scope
Runtime instructions are limited to intent classification, delegating to other skills, running other skills' helper scripts (e.g., skills/*/scripts/*.sh or python collectors), and web_search for public info. There is no instruction to read arbitrary local system files, exfiltrate data, or post to unknown external endpoints.
Install Mechanism
No install spec or code to download/execute is included — this is instruction-only. No archives, external URLs, or package installs are requested.
Credentials
The skill declares no required environment variables, credentials, or config paths. It explicitly delegates API access (NTS/company-info, tax-guide, law-search) to separate skills rather than asking for secrets itself, which is proportionate to its router role.
Persistence & Privilege
always:false and user-invocable. The skill does not request persistent installation or system-wide changes and does not attempt to modify other skills' configs. Autonomous invocation is allowed by default but not combined with other elevated privileges here.
Assessment
This skill appears internally consistent: it classifies startup-related intents and delegates data collection to other domain skills and public web searches. Before enabling it, check the reputation and permissions of the linked skills (company-info, tax-guide, law-search, korean-gov-programs, welfare-guide) because those delegated skills are the ones that may need API keys or access to official data sources. Note the publisher is unknown and there is no homepage — consider enabling in a limited/test environment first and verify that delegation paths (the referenced scripts and connectors) point to trusted, installed skills rather than arbitrary paths. Finally, remember the skill's outputs are informational only (it includes a disclaimer) and not a substitute for professional legal/tax advice.Like a lobster shell, security has layers — review code before you run it.
businessvk97d5y0trprj73r9m5hf2sgjz981nk8nkoreavk97d5y0trprj73r9m5hf2sgjz981nk8nkoreanvk97d5y0trprj73r9m5hf2sgjz981nk8nlatestvk97d5y0trprj73r9m5hf2sgjz981nk8nstartupvk97d5y0trprj73r9m5hf2sgjz981nk8n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
