Passport

Validate and format passport or identity document data. Use when checking fields, validating numbers, generating fixtures, linting records.

This skill appears to do what it claims: a local CLI that stores and manages passport/ID test data. Before using with real personal data, consider the privacy implications: the tool writes every input into plaintext log files (~/.local/share/passport/*.log and history.log). If you'll store sensitive PII, either avoid using real data, change DATA_DIR to a secure location, restrict filesystem permissions (e.g., chmod 700 on the directory), or add encryption. Also inspect the script yourself and run it offline to confirm no network activity in your environment. If you need the agent to use this skill autonomously, remember any inputs it sends to the CLI will be recorded locally.

Type: OpenClaw Skill Name: passport Version: 2.0.0 The 'Passport' skill is classified as suspicious because it claims to be a developer toolkit for validating and formatting sensitive identity document data, but the implementation in 'scripts/script.sh' is a 'placebo' that only appends user input to local plaintext log files in '~/.local/share/passport/'. This discrepancy between the stated purpose and the actual code logic is deceptive, as it encourages users to provide PII (Personally Identifiable Information) to a tool that performs no validation and stores it insecurely. While the script lacks clear evidence of data exfiltration or remote execution, its misleading nature and handling of sensitive data warrant caution.