Ppe

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If the agent runs the remove command, a PPE record can be deleted from the local tracker data.

Why it was flagged

The remove command deletes a selected line from the tool's local data file. This is purpose-aligned for managing tracker entries, but it is still a data-mutating action.

Skill content

sed -i "${num}d" "$DATA_DIR/data.jsonl"

Recommendation

Use remove only when you specifically intend to delete a tracker entry, and consider backing up data before bulk cleanup.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

PPE records remain on disk and may include workplace or personal safety information entered by the user.

Why it was flagged

The script persists PPE entries in a local JSONL file under ~/.ppe by default, or under a user-specified PPE_DIR.

Skill content

DATA_DIR="${PPE_DIR:-$HOME/.ppe}" ... >> "$DATA_DIR/data.jsonl"

Recommendation

Avoid entering sensitive details unless you are comfortable storing them locally, and review or delete ~/.ppe data when no longer needed.