Hmi
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill executes a local shell script that can create, read, modify, remove, and export the tool's own local data files.
The skill's documented commands run an included local shell script. This is expected for a CLI-style skill and the script is included for review.
scripts/script.sh status
Use the documented commands intentionally, and review the script first if you are uncomfortable running local shell tools.
Anything added to the tool may remain on disk and could be shown or exported in a later command.
The skill persists user-entered data locally and can later list, search, or export it. This is disclosed and scoped to the tool's data directory.
All data stored in `~/.hmi/` using JSONL format
Do not store secrets or sensitive operational details unless you are comfortable keeping them in local plaintext files; set HMI_DIR if you want a different storage location.