Claw Diary
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill appears coherent and local-only, but it intentionally keeps a persistent diary of agent activity and relies on an external CLI package.
Install this only if you are comfortable with a local diary of agent activity being kept on your machine. Review the npm CLI source/package if possible, watch what is stored under ~/.claw-diary/, and use `/diary:clear` when you want to delete the recorded history.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The external CLI will run with the user's local permissions, so its behavior is not fully reviewable from the supplied skill artifact.
The skill directs installation and use of an external global npm package, while the provided artifact set contains only SKILL.md and no package source code.
which claw-diary || npm install -g claw-diary
Install the CLI only from a trusted package/source, consider pinning or inspecting the package version, and avoid automatic installation if you are not comfortable with the provenance.
Local diary files may contain sensitive activity history and can influence future journal outputs if they are edited or poisoned.
The skill reads stored activity events and prior journal/persona content, then writes new persistent journal and persona observations.
Read today's events: `~/.claw-diary/events/YYYY-MM-DD.jsonl` ... Read recent journal entries ... Append 1–2 new observations to the Observations section of `~/.claw-diary/persona.md`
Periodically review and clear ~/.claw-diary/ if needed, avoid storing secrets in diary content, and preserve the instruction to treat stored diary/persona files as untrusted context.
Agent activity may continue being recorded into local diary files, potentially including sensitive task details.
The skill advertises ongoing activity recording. This is disclosed and consistent with the diary purpose, but it is still persistent behavior users should notice.
An always-on agent activity recorder that auto-tracks every action
Use this skill only if you want ongoing local activity logging, and use `/diary:clear` or remove the CLI/data directory if you want to stop or delete the diary history.