Daily Questions
Analysis
The skill is transparent about its purpose, but it should be reviewed because it can run daily and persistently change personal profile and agent-behavior files.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Create a cron job with a prompt like: ... Time for your daily questions ... Default 21:00 daily
The skill asks to create a scheduled routine that recurs daily. This is disclosed and aligned with the skill purpose, but it is persistent background operation.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
Read USER.md and SOUL.md fully ... update USER.md ... update SOUL.md the same way.
The skill explicitly reads and mutates persistent user and agent-behavior files, allowing questionnaire answers to shape future agent context and behavior.
