cognitive-enhancement-engine
AdvisoryAudited by Static analysis on May 4, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Content stored as memory may be recalled into later reasoning, so secrets or malicious instructions saved as memories could affect future answers during the engine's lifetime.
The skill is explicitly designed to store user-provided observations and memories and later use them for recall and reasoning. This is purpose-aligned, but it means sensitive or untrusted text can influence later results within the engine.
`perceive(observation)` | Store perception into working memory ... `memorize(content, importance)` | Store into long-term memory ... `reason(problem)` | Memory-based reasoning
Avoid memorizing secrets unless you are comfortable with later reuse, and treat recalled memories as untrusted context rather than authoritative instructions.
Your shell startup file may be changed so the `cognitive-enhance` alias remains available until you remove it.
Running the setup script appends a persistent alias to the user's .bashrc or .zshrc without an interactive confirmation prompt. It does not show a background process or hidden execution, but it does modify persistent shell configuration.
if ! grep -q "cognitive-enhance" "$SHELL_RC" 2>/dev/null; then
echo "$ALIAS_CMD" >> "$SHELL_RC"Inspect setup.sh before running it, skip the setup script if you do not want shell changes, or remove the added alias from .bashrc/.zshrc afterward.
Installation may fail or behave differently than registry metadata suggests if Python is not available.
The setup script requires Python even though registry metadata declares no required binaries and no install spec. This appears to be an under-declared, purpose-aligned runtime requirement rather than hidden behavior.
echo "[ERROR] Python not found. Please install Python 3.8+"
Verify Python 3.8+ is installed before using the skill and prefer manual inspection/running of the local files over blindly relying on registry requirement metadata.
