LighterLoad

PassAudited by ClawScan on May 1, 2026.

Overview

LighterLoad is a coherent instruction-only reminder skill, but it intentionally keeps personal family and relationship notes and may run weekly nudges, so review its privacy implications before use.

Install only if you want an assistant to maintain ongoing notes about your household, family, and relationships. Keep the stored details minimal, review the weekly cron setup, restrict calendar and messaging access where possible, and delete `memory/people/` if you stop using it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information about family, friends, children, health, preferences, and relationships may be retained and reused in later nudges.

Why it was flagged

The skill persistently records personal relationship and health-context details from conversations for future use.

Skill content
During regular conversations, listen for details about the user's people: ... "Mum's hip is playing up again" ... Update the relevant person file in `memory/people/`
Recommendation

Only share details you are comfortable storing; periodically review or delete `memory/people/`, and avoid saving secrets, account numbers, policy numbers, or detailed medical information.

What this means

If granted, the skill may see calendar context, maintain personal notes, and send recurring messages to the user.

Why it was flagged

The skill asks the host platform for delegated access to private memory, calendar data, user messaging, web search, and scheduling.

Skill content
Memory/file access: Read/write to `memory/people/` directory; Calendar access: Read access to user's calendar; Messaging: Ability to send emails or messages to the user; Web search; Cron/scheduling
Recommendation

Grant the narrowest available calendar and messaging permissions, confirm messages are only sent to you, and disable permissions you do not need.

What this means

The assistant can continue producing weekly reminders after setup, using stored memory and calendar context.

Why it was flagged

The skill is designed to keep operating on a schedule, although it also instructs the agent to explain and obtain consent before creating the cron job.

Skill content
Create a weekly cron job ... Sends a brief "care nudge" email or message ... Cron job must be clearly explained before creation
Recommendation

Create the recurring task only if you want ongoing nudges, review its schedule and output, and delete the cron job plus `memory/people/` if you stop using the skill.