Portugal

Discover Portugal like a local with specific restaurants, hidden gems, wine regions, and tips beyond the tourist traps.

This skill appears to be a local travel guide that keeps its trip memory in ~/portugal/ and otherwise contains static guidance. Before installing: 1) Inspect setup.md (and any of the 12 omitted files) to confirm there are no hidden instructions that read other system files or perform network requests. 2) Be aware the skill will write/keep trip context in ~/portugal/ — don't store sensitive credentials or private data there. 3) If you prefer to prevent any autonomous actions, keep the skill user-invocable only or disable autonomous invocation at the agent level. 4) 'clawhub install' and 'clawhub sync' references imply network tools outside the skill; those are optional helpers and are not required by the skill itself.

Type: OpenClaw Skill Name: portugal Version: 1.0.0 The skill is classified as suspicious due to its reliance on markdown as an attack surface for direct shell command execution. Specifically, `setup.md` contains the instruction `mkdir -p ~/portugal`, which demonstrates the agent's capability to execute arbitrary shell commands. While this particular command is benign and intended for skill setup, it highlights a significant Remote Code Execution (RCE) vulnerability in the OpenClaw platform's design. There is no evidence of intentional malicious behavior such as data exfiltration or unauthorized network requests within the provided files, and `SKILL.md` explicitly disclaims such actions.