Let Me Know

ReviewAudited by ClawScan on May 10, 2026.

Overview

The notification workflow is mostly coherent, but it asks for a privileged gateway restart fallback that is excessive for a reminder skill and lacks clear user approval.

Install only if you are comfortable with an agent sending progress messages during long tasks. Before using it, disable or require approval for the gateway restart fallback, and make sure heartbeat messages do not include sensitive log content.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI03: Identity and Privilege Abuse

What this means

A gateway restart could interrupt active work or services just to clean up a notification heartbeat.

Why it was flagged

This requests a privileged environment-control capability that is not necessary for ordinary notifications and does not specify asking the user before restarting the gateway.

Skill content

If cron removal fails due to gateway timeout, retry removal; if still stuck, use gateway restart (requires `commands.restart: true`) and retry.

Recommendation

Remove the gateway-restart fallback or require explicit user/admin approval before using it; prefer bounded cleanup retries and clear failure reporting.

Low

#ASI10: Rogue Agents

What this means

If cleanup fails, periodic progress messages could continue after the task ends.

Why it was flagged

The skill may create a background cron heartbeat job, which is persistent behavior, but it is disclosed, limited to detached heartbeats, and includes cleanup instructions.

Skill content

只有在必须脱离当前执行流时才用 cron 心跳 ... 通过 `cron add` 创建心跳 job ... 创建后把返回的 heartbeatJobId 写入状态文件 ... 在任务成功/失败的 finally 里调用 `cron remove <heartbeatJobId>`。

Recommendation

Prefer the in-turn heartbeat loop when possible, and verify any cron heartbeat is removed after task completion.

Info

#ASI07: Insecure Inter-Agent Communication

What this means

Progress updates could include filenames, errors, or other details visible in the selected chat channel or DM.

Why it was flagged

The skill sends task progress derived from logs or state files to a chat destination, which is expected for the skill but may expose sensitive task details if the progress text contains them.

Skill content

Before each heartbeat message, read the latest progress (state file/logs) and send current progress ... Prefer outbound normal chat messages ... Example for Discord DM: `user:<id>`.

Recommendation

Keep heartbeat summaries minimal, avoid including secrets or sensitive log output, and confirm the message target is correct.