Skillv1.0.0

ClawScan security

Trip Plan · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 1, 2026, 7:35 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's instructions, required resources, and metadata are internally consistent for generating itineraries and do not request unrelated credentials or installs.
Guidance: This skill appears coherent and safe from a permissions perspective, but note it expects the agent to be able to perform web searches or have browsing access; if the agent lacks browsing, outputs may hallucinate details (place names, timings, prices). Before installing, confirm the agent platform provides a safe browsing/search tool and consider instructing users that prices and transport times should be verified in real time. Also verify privacy expectations: the skill uses conversation context (user-provided travel details), so avoid providing unnecessary sensitive data in prompts.

Purpose & Capability: noteThe name/description (trip itinerary generator) align with the SKILL.md instructions. The instructions expect the agent to perform live web searches for up-to-date place names, restaurants, and transport times; the registry metadata declares no required binaries or credentials, which is reasonable for an instruction-only skill, but the skill implicitly requires a browsing/search capability (not explicitly declared).
Instruction Scope: okRuntime instructions are scoped to collecting travel info from web searches, confirming user-provided travel details, building day-wise plans with timings, and handling revisions. The SKILL.md does not instruct the agent to read unrelated files, access environment variables, or transmit data to unexpected endpoints.
Install Mechanism: okNo install specification or code files are present; the skill is instruction-only. Nothing is written to disk or installed by this skill, which matches the declared absence of install steps.
Credentials: okThe skill requests no environment variables, credentials, or config paths. That is proportional to its stated purpose of generating itineraries from web-sourced information.
Persistence & Privilege: okalways is false and the skill does not request persistent or elevated privileges. It does not modify other skills or system-wide settings.