First Principles Thinking

PassAudited by VirusTotal on May 10, 2026.

Overview

Type: OpenClaw Skill Name: b143kc47-first-principles-thinking-v2 Version: 1.0.1 The 'first-principles-thinking' skill bundle is a comprehensive reasoning framework designed to guide an AI agent through structured problem-solving. It consists entirely of Markdown documentation and configuration files (SKILL.md, agents/openai.yaml, and various reference files) with no executable code, scripts, or external dependencies. The instructions focus on logical decomposition, assumption testing, and verification techniques, and include explicit safeguards against handling sensitive data or executing unauthorized commands.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may add analysis, assumptions, and verification steps before giving a direct answer on complex tasks.

Why it was flagged

This instruction intentionally changes the agent's response flow by requiring structured analysis before direct answers. It is consistent with the skill's reasoning purpose and is not hidden.

Skill content
<HARD-GATE>
Do NOT propose a solution, recommend a technology, or start writing code until:
Recommendation

Use this skill when you want structured reasoning; for simple tasks, explicitly ask the agent to skip first-principles analysis or go straight to implementation.

What this means

If a user pastes sensitive or stale ledger content, it could influence the conversation or expose private details in chat.

Why it was flagged

The skill uses user-pasted ledgers and prior notes as reasoning context, which can influence later answers. The artifact bounds this to manual copy/paste and says there is no automatic persistence.

Skill content
carry reasoning context across turns
by pasting prior notes into the conversation. This package does not include any
helper program or automatic state mechanism.
Recommendation

Do not paste secrets, regulated data, or confidential business facts into ledgers, and re-check imported claims before relying on them.