Durable Files Weekly Review (Public)

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The scan may process sensitive persistent workspace context, even though the included script only reports metrics and stale-marker matches rather than copying full file contents.

Why it was flagged

The skill intentionally reviews durable instruction, memory, and identity files, which may contain persistent context or private user/agent guidance.

Skill content
Audit these files relative to a workspace root: ... `MEMORY.md` ... `IDENTITY.md` ... `AGENTS.md`
Recommendation

Use it only on the intended workspace, review the generated report, and avoid pointing it at roots that contain unrelated sensitive durable files.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

Approving the wrong cleanup could remove useful persistent instructions or change how future agents behave in the workspace.

Why it was flagged

Cleanup edits to durable instruction files can persist across future sessions and influence later agent behavior, but the artifact clearly requires explicit approval first.

Skill content
Require explicit user approval before any deletions. Apply approved edits and post concise changelog.
Recommendation

Approve cleanup in small batches, keep the changelog, and consider backing up important durable files before accepting deletions.