SecretCodex

PassAudited by ClawScan on May 10, 2026.

Overview

SecretCodex is an instruction-only educational cipher and codename skill with no code, credentials, or install hooks, but users should not treat its classic ciphers as real modern security.

This skill appears safe to install as a no-code educational helper. Do not paste passwords, financial, medical, legal, or other truly sensitive information into it, and do not rely on Caesar, Vigenère, Rail Fence, Playfair, or similar classic ciphers for real confidentiality.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could mistakenly use the generated ciphers for sensitive information if they focus on the stronger-sounding examples and miss the security warning.

Why it was flagged

The example may overstate the practical security of classical ciphers, even though the README later warns that SecretCodex is not for truly sensitive data.

Skill content
You: I need maximum security for a message. How do I layer ciphers? ... AI: For strong security, use DOUBLE ENCRYPTION: ... Vigenère ... Rail Fence
Recommendation

Use this skill for education, games, puzzles, and casual obfuscation only; use audited modern encryption tools or secure messaging apps for real secrets.