My Custom Skill

PassAudited by ClawScan on May 17, 2026.

Overview

This is a coherent instruction-only memory skill, but users should know it creates persistent local notes and the registry metadata does not fully match the embedded skill metadata.

This skill appears safe for its intended purpose as a local markdown-based memory system. Before installing, make sure you are comfortable with the agent saving information under ~/memory/, review that folder periodically, avoid storing secrets, and verify the publisher because the registry metadata and embedded metadata do not fully match.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Personal, work, contact, or decision details may be saved in local markdown files and reused in future conversations.

Why it was flagged

The skill intentionally creates persistent local memory and instructs the agent to save information promptly, which is central to the stated purpose but can preserve sensitive or incorrect information for later reuse.

Skill content
When user shares important information: 1. Write to appropriate file in ~/memory/ ... Don't wait. Don't batch. Write immediately.
Recommendation

Only enable this if you want persistent local memory; periodically review ~/memory/ and avoid storing secrets or sensitive personal data unless you are comfortable with local retention.

What this means

The agent may create, move, or update files inside ~/memory/ as part of maintaining the memory system.

Why it was flagged

The skill documents local filesystem mutation commands for organizing and archiving memory files. These commands are scoped to the skill's own ~/memory directory and are expected for this purpose.

Skill content
mv ~/memory/projects/old.md ~/memory/archive/
Recommendation

Confirm the agent is operating only inside ~/memory/ and review changes if you are storing important records.

What this means

You may be installing a repackaged or renamed copy rather than a registry entry whose metadata exactly matches the embedded skill files.

Why it was flagged

The embedded metadata differs from the registry metadata shown for this evaluation, which lists a different owner ID, slug 'my-custom-skill', and version 1.0.0. This is a provenance/packaging inconsistency, though no code or install-time behavior is present.

Skill content
"ownerId": "kn73vp5rarc3b14rc7wjcw8f8580t5d1", "slug": "memory", "version": "1.0.2"
Recommendation

Verify the publisher and homepage before installing, especially if you expected an official or specific Memory skill.