Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed local workflow helper for detecting repeated tool use, with no artifact evidence of hidden execution, exfiltration, or destructive behavior.
Before installing, be aware that this skill asks the agent to install and enable the ClawPhylax plugin, which keeps a local ledger of request and tool-outcome history for repetition checks. That behavior is disclosed and purpose-aligned, but users who do not want local session activity recorded should avoid enabling the plugin.
The description says to use the skill when "something feels familiar" or when "progress stalls," which are subjective conditions without clear boundaries. These broad cues can cause unintended invocation because they overlap with many ordinary troubleshooting situations and do not define when the skill should not be used beyond one narrow exception.
The phrases "I have done this before" and "no progress for several calls" are imprecise and rely on subjective judgment. Because the section does not define measurable thresholds for several of these cases, the activation scope remains ambiguous and may lead to overuse.
No suspicious patterns detected.
