v1.0.0

LYGO Branch: CRYPTOSOPHIA — Memetic Soulforger

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:29 AM.

Analysis

This is a user-invoked persona/advice pack with small read-only helper scripts; the main things to notice are its optional external verifier recommendation and lore-like safety wording.

GuidanceThis skill appears safe to use as an advisory persona/content helper. It does not request credentials or autonomous tool access, and its helper scripts are read-only checks. Review the linked verifier skill separately if you choose to use it, and treat mystical or symbolic safety claims as branding rather than protection.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

references/verifier_usage.md

Install:
- https://clawhub.ai/DeepSeekOracle/lygo-mint-verifier

What it does:
- canonicalize a pack
- deterministic SHA-256 hash
- write append-only + canonical ledgers

The skill recommends installing or using a separate verifier skill that performs additional write-oriented verification/ledger functions. This is disclosed and purpose-aligned, but it is outside the reviewed package.

User impactIf you follow the recommendation, you may install or invoke another skill with its own behavior and permissions.

RecommendationReview the linked LYGO-MINT verifier separately before installing or using it, especially if it writes ledgers or prepares content for public posting.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

references/persona_pack.md

- Anti-entropy lock: invalid/malicious inputs are nullified by math-lock intent.

This is an unsupported safety-sounding claim in the persona lore. It does not show malicious behavior, but users should not treat it as an actual security control.

User impactA user could over-trust the persona's safety framing if they read the lore as a technical guarantee.

RecommendationTreat this as thematic language only; continue to verify claims and review outputs normally.