cognitive-enhancement-engine

AdvisoryAudited by Static analysis on May 4, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Content stored as memory may be recalled into later reasoning, so secrets or malicious instructions saved as memories could affect future answers during the engine's lifetime.

Why it was flagged

The skill is explicitly designed to store user-provided observations and memories and later use them for recall and reasoning. This is purpose-aligned, but it means sensitive or untrusted text can influence later results within the engine.

Skill content
`perceive(observation)` | Store perception into working memory ... `memorize(content, importance)` | Store into long-term memory ... `reason(problem)` | Memory-based reasoning
Recommendation

Avoid memorizing secrets unless you are comfortable with later reuse, and treat recalled memories as untrusted context rather than authoritative instructions.

What this means

Your shell startup file may be changed so the `cognitive-enhance` alias remains available until you remove it.

Why it was flagged

Running the setup script appends a persistent alias to the user's .bashrc or .zshrc without an interactive confirmation prompt. It does not show a background process or hidden execution, but it does modify persistent shell configuration.

Skill content
if ! grep -q "cognitive-enhance" "$SHELL_RC" 2>/dev/null; then
    echo "$ALIAS_CMD" >> "$SHELL_RC"
Recommendation

Inspect setup.sh before running it, skip the setup script if you do not want shell changes, or remove the added alias from .bashrc/.zshrc afterward.

What this means

Installation may fail or behave differently than registry metadata suggests if Python is not available.

Why it was flagged

The setup script requires Python even though registry metadata declares no required binaries and no install spec. This appears to be an under-declared, purpose-aligned runtime requirement rather than hidden behavior.

Skill content
echo "[ERROR] Python not found. Please install Python 3.8+"
Recommendation

Verify Python 3.8+ is installed before using the skill and prefer manual inspection/running of the local files over blindly relying on registry requirement metadata.