Welfare Guide
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a legitimate welfare-benefit information guide, with normal privacy and API-key handling considerations rather than evidence of malicious behavior.
This skill is reasonable to install if you want Korean welfare and subsidy guidance. Use minimal personal details, do not provide highly identifying data, protect the optional data.go.kr API key file, and review any future helper scripts before running them.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the platform grants all declared connectors, the skill may have a little more tool access than its documented welfare lookup flow needs.
Search and docs access fit the benefit-information purpose, but notification access is declared without a matching workflow in the artifacts.
connectors: [~~search, ~~notify, ~~docs]
Grant only the connectors needed for your use case, especially search/API lookup; avoid enabling notification capabilities unless you specifically want them.
A locally stored API key could be exposed to other local users or processes if file permissions are loose.
The skill asks the user to save a data.go.kr API key in a local file. This is purpose-aligned for official public-data API access, but it is still credential handling.
echo "YOUR_API_KEY" > ~/.config/data-go-kr/api_key
Use a dedicated data.go.kr key, restrict the file permissions, and rotate the key if you suspect it was exposed.
The current skill is instruction-only, but any later-added scripts could change the behavior and should be reviewed before use.
The package references future shell scripts for API access, but only a README is present; those helpers were not part of the reviewed artifacts.
각 스크립트 구현 (키: `~/.config/data-go-kr/api_key`)
Do not run newly added welfare-guide scripts until you have reviewed their source and confirmed they only call the intended public-data APIs.
Personal circumstances such as region, income range, household size, disability, pregnancy, or unemployment status could be included in external lookup queries if the user provides them.
The skill collects welfare eligibility details and may use web search/API lookups. This is expected for tailored benefit guidance, but the information can be sensitive.
- 거주 지역 (시/군/구): ... - 가구원 수 (선택): ... - 소득 수준 ...; web_search: "[상황] 지원금 2026 복지로"
Share the minimum details needed, avoid names or resident-registration numbers, and ask the agent before sending sensitive details to web search or external services.