Claude Code Setup
PassAudited by ClawScan on May 1, 2026.
Overview
This skill transparently creates a project-local `.claude/` configuration, with no evidence of credential access, network exfiltration, or destructive behavior.
This appears safe to use if you want a `.claude/` collaboration layer. Run it from the correct project directory, review the generated files, and do not use overwrite options unless you mean to replace existing Claude Code configuration.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill will add persistent project configuration files, and using `--force` could replace existing `.claude/` files.
The helper writes project files under `.claude/`, and has a `--force` path that can overwrite existing files if explicitly used. This matches the skill purpose, but it is still a local file mutation capability.
const claudeDir = path.join(projectRoot, '.claude'); ... if (!fs.existsSync(filePath) || options.force) { fs.writeFileSync(filePath, file.content.trim()); }Run it only from the intended project root and avoid `--force` unless you intentionally want to regenerate existing files.
The skill may fail or behave differently if Node.js is unavailable, and users should understand that a local script is being run.
The workflow relies on executing a packaged Node.js helper script even though the registry requirements declare no required binaries. The script is included and readable, so this is an under-declared setup dependency rather than hidden behavior.
node ~/.openclaw/skills/claude-code-setup/index.js
Confirm Node.js is available and review the included helper before running if your environment has strict change-control requirements.
Future AI coding sessions may follow these generated rules and any later updates, so inaccurate or unwanted instructions could affect later work.
The skill creates and encourages updates to persistent project instructions that future Claude Code sessions may treat as high-priority context.
CLAUDE.md is core — Highest priority project instructions ... After completion: Update `.claude/` with any new standards learned
Review the generated `.claude/` files after setup and periodically check changes before relying on them for future development.
