Algernon Interview

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill matches its mock-interview purpose, though it can read local OpenAlgernon study data, save a local memory note, and optionally append the report to Notion if configured.

Before installing, make sure you are comfortable with the skill reading your OpenAlgernon study database, saving a short interview summary locally, and optionally exporting the report to the Notion page configured in your environment.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may inspect topics and tags in the local OpenAlgernon study database to choose interview questions.

Why it was flagged

The skill directs the agent to use a local SQLite command to read card topics for the requested material. This is disclosed, read-only, and purpose-aligned, but it is still local tool/data access.

Skill content
sqlite3 "$DB" "SELECT c.front, c.tags FROM cards c ... WHERE m.slug = 'SLUG' ... LIMIT 30;"
Recommendation

Use it only with the intended OpenAlgernon database, and verify the selected material slug if your study database contains private decks.

What this means

The install view may not warn users that the skill expects a local SQLite tool and can use Notion settings if present.

Why it was flagged

The registry metadata does not declare tools or configuration that SKILL.md references, including sqlite3, optional notion-cli, and NOTION_PAGE_ID. This is an under-declared dependency/configuration note, not evidence of hidden code.

Skill content
Required binaries (all must exist): none; Required env vars: none; Primary credential: none
Recommendation

Document sqlite3 as a runtime expectation and Notion CLI/page ID as optional export settings.

What this means

If Notion CLI and NOTION_PAGE_ID are configured, the interview report and study topics may be added to that Notion page.

Why it was flagged

The optional Notion step can append the interview report to a configured Notion page using the local CLI/page ID. This is disclosed and scoped, but it uses delegated account/page write authority.

Skill content
"$NOTION_CLI" append --page-id "$NOTION_PAGE_ID" --content "MARKDOWN"
Recommendation

Set NOTION_PAGE_ID only for the intended page and prefer confirming with the user before appending the report.

What this means

Your interview performance summary and recommended study focus may be saved in a local memory file.

Why it was flagged

The skill persists a session summary, score, and focus topics to local OpenAlgernon memory. The stored content is narrow and purpose-aligned, but it may remain available after the interview.

Skill content
echo "[HH:MM] interview session -- MATERIAL_NAME | Overall: X/10 | Focus: TOPICS" >> "${ALGERNON_HOME}/memory/conversations/YYYY-MM-DD.md"
Recommendation

Review or delete the memory file if you do not want interview summaries retained, and avoid including sensitive personal information in answers.