ab-test-setup

• Risk level: Low
• Analyzed: May 1, 2026, 6:43 AM
• Findings: 1
• Version: 1.0.0

Overview

This instruction-only A/B testing guide appears benign, with the only noteworthy behavior being a scoped read of a local marketing context file if present.

This skill looks safe for normal A/B test planning use. Before installing, check any `.agents/product-marketing-context.md` or `.claude/product-marketing-context.md` file in your workspace, since the skill tells the agent to use that context when giving recommendations.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI06: Memory and Context Poisoning

Note

What this means

The agent may incorporate local product-marketing information into its A/B test recommendations.

Why it was flagged

The skill directs the agent to use a persistent local context file. This is scoped and relevant to A/B test planning, but such files may contain private business context or stale/untrusted guidance.

Skill content

If `.agents/product-marketing-context.md` exists (or `.claude/product-marketing-context.md` in older setups), read it before asking questions. Use that context

Recommendation

Keep the product-marketing context file accurate and free of instructions you would not want the agent to rely on; avoid storing unnecessary sensitive business details there.