ARCHITECT: Autonomous Goal Execution for AI Agents

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill is coherent with its advertised purpose, but users should understand that it deliberately makes the agent more autonomous and may use persistent memory if paired with other skills.

Before installing, be comfortable with an agent that plans and executes multi-step goals after approval. Check each mission brief, insist on confirmation for external or irreversible actions, and review any memory/reflection behavior if you use this with a memory skill.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The agent may take more initiative in planning and completing tasks after a goal is approved.

Why it was flagged

The skill intentionally instructs the agent to perform multi-step autonomous execution. This is purpose-aligned, and the same artifact includes confirmation rules, but users should understand it may use available tools without step-by-step prompting.

Skill content
When you receive a high-level goal, run this loop autonomously... EXECUTE... VALIDATE... ADAPT
Recommendation

Review the mission brief before approving, and require explicit confirmation for any action that writes, sends, deletes, publishes, or uses external systems.

#
ASI01: Agent Goal Hijack
Low
What this means

The agent may reframe vague requests and pursue an interpretation the user did not originally state.

Why it was flagged

The skill tells the agent to reinterpret the user's stated request into a 'real goal.' This is disclosed and mitigated by the mission-brief confirmation step, but users should check that the inferred goal matches their intent.

Skill content
The stated goal is rarely the real goal. Before decomposing, extract... REAL GOAL
Recommendation

Read the mission brief carefully and correct the goal, constraints, and out-of-scope items before typing YES.

#
ASI06: Memory and Context Poisoning
Low
What this means

If memory features are enabled, task details or inferred preferences could be reused later.

Why it was flagged

The skill describes saving lessons for future runs and also promotes pairing with a memory skill. This is purpose-aligned, but persistent context can carry sensitive or stale information into later tasks.

Skill content
8. REFLECT    → Log insights for future executions
Recommendation

Avoid storing secrets or private data in reflections, and periodically review or clear any memory entries created during use.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Users have less external provenance information for the skill publisher and project history.

Why it was flagged

The registry metadata does not provide a source repository or homepage. The skill is instruction-only with no code to install, so this is a provenance note rather than a behavior concern.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the registry listing and review the included instructions before enabling the skill.