Aarondb
PassAudited by ClawScan on May 1, 2026.
Overview
Aarondb is a coherent Datalog database skill, but users should verify the external npm package and be aware that stored facts may persist or sync across agents.
This skill appears purpose-aligned and not malicious from the provided artifacts. Before installing, verify the referenced npm package and repository, and decide whether persistent or cross-agent fact storage is appropriate for the information your agent will handle.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the referenced package would run code supplied outside this reviewed instruction-only artifact.
The skill relies on an external npm package that is not included in the artifact set. The install is user-directed and purpose-aligned, but package provenance should be verified before use.
npm install @criticalinsight/aarondb-edge
Verify the npm package, repository, maintainer, and version before installing it in an agent runtime.
Incorrect, sensitive, or untrusted facts could remain available to future agent reasoning if users store them.
Persistent facts can be reused across tasks or sessions. This is the advertised purpose of the skill, but users should consider what facts are safe to retain and reason over.
Enables persistent fact management and reasoning.
Use clear namespaces, review stored facts, and avoid storing secrets or unverified instructions as trusted facts.
Facts placed in a shared backend could become visible to other configured agents or influence their reasoning.
The skill describes cross-agent synchronization through shared backend storage. This is purpose-aligned, but shared fact stores require clear access and trust boundaries.
Facts can be synchronized across agents using a shared D1/KV back-end
Only enable shared synchronization with trusted agents and properly scoped backend permissions.